web log analysis

Turn terabytes of web access logs into early-warning intelligence by pairing classic Linux tools with lightweight AI. This guide shows how to parse and normalize nginx/Apache logs with gawk/jq, visualize with GoAccess, engineer per-IP/minute features in Bash, and run an Isolation Forest in Python to surface anomalies (spikes, scans, misconfigurations), then turn findings into safe, automatable actions.