only served urls?

[gcb]

The section 'Requested Files (URLs)' shows urls that are 404. The top spot is dominated by bots probing wordpress installations 🐼

maybe it's something wrong on my log parser line? ...i do also see lots of wordpress probes on the top of the 404 section.

[allinurl]

That's odd, they should only appear under the 404. Can you post a screenshot showing the request on the Requested Files panel and include the corresponding lines from your access log? I want to replicate it on my side. Thanks

[gcb]

Thanks for looking into this. Not sure i understood your last message. What do you mean "all three" requests?

The generated file (.html) shows 183 times it served /.env, but the logs show zero 2xx codes. It does show 119 3xx but that doesn't match anything. Then it shows 20 hits for 4xx codes, but the logs contain 101 4xx codes.

[allinurl]

Sorry, I meant the sample log you attached only contains three requests, and my response was based on that. Please feel free to attach a relevant access log so I can try to reproduce the issue on my end.

[gcb]

i limited to a single url to make it easier. but the issue is the error codes i assumed.

You don't get the same html as i attached here?

[allinurl]

Got it. I've pushed some changes that should fix this and display the correct count for those 404s. Please build from the development and let me know if that solves the issue for you. Thanks!

[gcb]

Usinging ed8cf63 (3 days ago) for my build

Still shows the wrong count. Maybe I have something wrong with my log format?

i get:

 2 - Requested Files (URLs) 
 Hits     h% Vis.     v% Tx. Amount Mtd Proto    Data
 ---- ------ ---- ------ ---------- --- -------- ----
  181 89.16%  102 98.08%  36.28 KiB GET HTTP/1.1 /.env
    2  0.99%    2  1.92%  338.0   B GET HTTP/1.0 /.env
 4 - Not Found URLs (404s) 
 Hits     h% Vis.     v% Tx. Amount Mtd Proto    Data
 ---- ------ ---- ------ ---------- --- -------- ----
   20  9.85%    0  0.00%   1.01 MiB GET HTTP/1.1 /.env

still using the same sample.log above, which have:

$ grep 'GET /.env HTTP' access.log | awk 'BEGIN { FPAT = "([^ ]+)|(\"[^\"]+\")" } { print $7 }' | sort | uniq -c 
    119 301
     13 400
     64 403
     24 404

So, I expected goaccess to show zero (or at most 119) requests for /.env. And 24 for 404.

my log lines are

78.153.140.178 - - [09/Dec/2025:23:02:13 +0000] "GET /.env HTTP/1.1" 403 555 "-" "Mozilla/4.0 (compatible; MSIE 5.5b1; Mac_PowerPC)"

and

log-format %h %^[%d:%t %^] "%r" %s %b "%R" "%u"

[allinurl]

If I run goaccess as:

./goaccess ../logs/sample.log --log-format=COMBINED

I get:

This shows 24 404s and 194 + 2 = 196 non-404 requests, for a total of 220, which matches the log. Let me know if missing something? Also, please run it without passing the config file and let me know if that helps.

Built at: ed8cf63