log parsing

Turn messy access logs into a clean traffic model.

The parser keeps the useful parts of raw logs while adding the structure needed for questions, trends, bot filtering, and anomaly detection.

formatsnginx / caddy / cdn
fieldsroute + status + referrer
privacyserver-side

san francisco signal

What gets extracted

Each request becomes a row of useful context.

01

Request shape

Method, path, route group, query posture, status, bytes, and timing.

02

Visitor context

User agent, bot class, referrer, country, and source grouping.

03

Operational context

Error windows, route spikes, crawler bursts, and deploy comparisons.

route map

Parser stages

Each step keeps the request trail visible, like city lights through fog.

Detect format

Detect format

Identify common access log patterns and reject unusable rows cleanly.

Normalize fields

Normalize fields

Map raw values to a stable analytics schema.

Enrich safely

Enrich safely

Add bot, geo, route, and anomaly context while preserving the trail.