1. Ingest
1. Ingest
Send access logs from an agent, file upload, or scheduled export.
fog clears
From raw access logs to answers you can trust.
knockstat keeps the pipeline legible: ingest, parse, enrich, index, ask. The point is not to hide raw data, but to make it usable.
ingestnginx / caddy / cdn
enrichgeo + bot + route
outputanswers
route map
The pipeline
Each step keeps the request trail visible, like city lights through fog.
2. Normalize
2. Normalize
Parse method, route, status, user agent, referrer, IP-derived geography, and timing.
3. Enrich
3. Enrich
Classify bots, group routes, detect anomalies, and index time windows.
4. Ask
4. Ask
Use the assistant to query evidence without hand-building dashboards.
san francisco signal
Designed for production traffic
The system handles normal analytics questions and operational debugging in the same surface.
A
Explainable
Answers carry the route and time window behind the summary.
B
No client tag
Works when JS is blocked, cookies are declined, or pages are static.
C
Multi-site ready
Ask across a group of properties without losing source context.
launch from the pier
Ready to connect logs?
Start with one site and one question. The rest can grow from there.