Nginx Nginx Amplify Open Source Monitoring Service

for HTTP 1/1.1/2 somewhat with default template





but there's custom dashboards you can setup too





for SSL cert/protocol/cipher logging you can do that another way as default nginx access logs don't log ssl/protocol/cipher info unless you do it like SSL - HTTP/TLS Protocol and SSL Cipher Usage Statistics Logging

 

FYI supported Nginx metrics (IF log has support added for that metric) Amplify | Library

Centmin Mod Nginx default access log uses the following metrics

Code (Text):

log_format  main  '$remote_addr - $remote_user [$time_local] $request '
                '"$status" $body_bytes_sent "$http_referer" '
                '"$http_user_agent" "$http_x_forwarded_for" "$gzip_ratio"'
                ' "$connection" "$connection_requests" "$request_time"';

Note altering these defaults may break other stats reading software like goaccess, ngxtop etc. That's why at SSL - HTTP/TLS Protocol and SSL Cipher Usage Statistics Logging you create a secondary separate log_format and separate access log file for custom metric logging.

However, notes on using multiple access logs for same site Amplify | Library

Excluding logs Amplify | Library

Guess if you add a custom log_format used for cloudflare it can serve 2 purposes for logging ssl_protocol and ssl_cipher info as well as cloudflare data if it exists in nginx.conf http{} context add under existing log_format configs

Code (Text):

log_format cf_custom4 '$remote_addr - $remote_user [$time_local] $request '
              '"$status" $body_bytes_sent "$http_referer" '
              '"$http_user_agent" "$http_x_forwarded_for" "$gzip_ratio" "$brotli_ratio"'
              ' "$connection" "$connection_requests" "$request_time" $http_cf_ray '
              '$ssl_protocol $ssl_cipher $http_content_length $http_content_encoding $request_length';

Then add a custom access.log format to all your Nginx vhosts at /home/nginx/domains/domain.com/log/cfssl-access.log

Code (Text):

  access_log /home/nginx/domains/domain.com/log/cfssl-access.log cf_custom4 buffer=256k flush=5m;

so looks like

Code (Text):

  access_log /home/nginx/domains/domain.com/log/access.log combined buffer=256k flush=5m;
  access_log /home/nginx/domains/domain.com/log/cfssl-access.log cf_custom4 buffer=256k flush=5m;
  error_log /home/nginx/domains/domain.com/log/error.log;

or use nginx amplify custom log formats named main_ext and main_extssl but add additional variables to log in main_extssl format

Code (Text):

log_format  main_ext  '$remote_addr - $remote_user [$time_local] "$request" '
                      '$status $body_bytes_sent "$http_referer" '
                      '"$http_user_agent" "$http_x_forwarded_for" '
                      '"$host" sn="$server_name" '
                      'rt=$request_time '
                      'ua="$upstream_addr" us="$upstream_status" '
                      'ut="$upstream_response_time" ul="$upstream_response_length" '
                      'cs=$upstream_cache_status' ;

log_format  main_extssl  '$remote_addr - $remote_user [$time_local] "$request" '
                      '$status $body_bytes_sent "$http_referer" '
                      '"$http_user_agent" "$http_x_forwarded_for" '
                      '"$host" sn="$server_name" '
                      'rt=$request_time '
                      'ua="$upstream_addr" us="$upstream_status" '
                      'ut="$upstream_response_time" ul="$upstream_response_length" '
                      'cs=$upstream_cache_status' 
                      ' "$gzip_ratio" "$brotli_ratio" '
                      '$http2 $ssl_protocol $ssl_cipher $ssl_session_reused $ssl_early_data '
                      '$http_content_length $http_content_encoding $request_length '
                      '$tcpinfo_rtt $tcpinfo_snd_cwnd '
                      '$http_cf_ipcountry $http_cf_ray';

Then add a custom access.log format to all your Nginx vhosts at /home/nginx/domains/domain.com/log/cfssl-access.log

Code (Text):

  access_log /home/nginx/domains/domain.com/log/cfssl-access.log main_extssl buffer=256k flush=5m;

so looks like

Code (Text):

  access_log /home/nginx/domains/domain.com/log/access.log combined buffer=256k flush=5m;
  access_log /home/nginx/domains/domain.com/log/cfssl-access.log main_extssl buffer=256k flush=5m;
  error_log /home/nginx/domains/domain.com/log/error.log;

Using main_extssl log format the differences between default access.log and mainext_ssl cfssl-access.log entry

Code (Text):

tail -1 access.log
xxx.xxx.xxx.xxx - - [27/Oct/2018:01:13:51 +0000] "GET / HTTP/2.0" 200 2102 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36 OPR/56.0.3051.52"

Code (Text):

tail -1 cfssl-access.log                  
xxx.xxx.xxx.xxx - - [27/Oct/2018:01:13:51 +0000] "GET / HTTP/2.0" 200 2102 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36 OPR/56.0.3051.52" "-" "domain.com" sn="domain.com" rt=0.000 ua="-" us="-" ut="-" ul="-" cs=- "3.15" "-" h2 TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256 . - - - 302 34634 10 - -

Then in /etc/amplify-agent/agent.conf exclude the default Centmin Mod Nginx log format /home/nginx/domains/domain.com/log/access.log

Code (Text):

[nginx]
exclude_logs=/home/nginx/domains/*/log/access.log,/home/nginx/domains/*/log/access-*.log

 

woah - just checked my and still dashboard intact - you might want to contact support to see what happened