1. Collect
The knockstat agent tails log files, Docker containers or Kubernetes pod logs and ships each request to ingest. Vector and Fluent Bit can post to the same endpoint, and the browser script and SDKs send page views and custom events.
fog clears
knockstat keeps the pipeline short: collect, parse, enrich, store, report. Every event is stored, so any figure can be recounted from the raw input.
route map
Each step keeps the request trail visible, like city lights through fog.
The knockstat agent tails log files, Docker containers or Kubernetes pod logs and ships each request to ingest. Vector and Fluent Bit can post to the same endpoint, and the browser script and SDKs send page views and custom events.
Read method, path, status, bytes, referrer and user agent from seven access-log formats.
Add country, a bot flag, device, browser and OS. The client IP feeds the country lookup and a daily visitor hash, and is never stored.
The dashboard and the product reports query the events in ClickHouse. Sessions are built at query time.
san francisco signal
Traffic figures and error pages sit in the same dashboard.
A
CI recounts every dashboard figure and every report from the raw input, and the two must agree.
B
Access logs count visits when JavaScript is blocked or pages are static. The optional script sets no cookies.
C
One dashboard covers several sites, with per-site counts and a site filter.
launch from the pier
Ask for hosted access, or run knockstat on your own servers.