log-analyzer

Analyze web server access logs and Cloudflare firewall events into an ASCII dashboard.

Updated Feb 28, 2026
One-click install
npx skills add https://github.com/cosmicdreams/claude-plugins --skill log-analyzer-cosmicdreams
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: log-analyzer
Source: https://github.com/cosmicdreams/claude-plugins/tree/main/lib/skills/log-analyzer
Command: npx skills add https://github.com/cosmicdreams/claude-plugins --skill log-analyzer-cosmicdreams

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) components.

What problem does it solve?

It helps you diagnose site health issues by turning Acquia/Drupal and Cloudflare log data into a readable dashboard so you can quickly find elevated 4xx/5xx rates, traffic spikes, likely bot sources, and suspicious Cloudflare threat blocks.

Core Features & Use Cases

  • Acquia log analysis: Ingests Acquia access logs (default) and optionally supports error-oriented log workflows by using the provided JSON export.
  • Cloudflare threat visibility: Counts Cloudflare firewall events (threat blocks) when CF_API_TOKEN and CF_ZONE_ID are available, otherwise skips that section without asking for credentials mid-run.
  • Actionable terminal dashboard: Produces a JSON summary that the Skill formats into an ASCII health dashboard, including status-code breakdown, top paths, hourly trends, and high-volume IPs for bot suspicion.
  • Shareable HTML output (optional): Generates a standalone HTML dashboard for stakeholders when terminal output is too wide.

Quick Start

Ask the AI to analyze logs and produce a site health dashboard for the last day using Acquia apache-access logs.

Frequently Asked Questions about log-analyzer

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I analyze web server access logs to identify traffic spikes and bot-heavy IPs?▼

Web server access log analysis identifies traffic spikes and bot-heavy IPs by processing JSON log files to extract status code breakdowns, top paths, hourly trends, and high-volume source IPs for incident triage.

Can I use Cloudflare firewall events to detect threat blocks and suspicious traffic patterns?▼

Cloudflare firewall events detect threat blocks and suspicious traffic patterns by querying the Cloudflare API using CF_API_TOKEN and CF_ZONE_ID, counting firewall events, and skipping gracefully if credentials are absent.

What is the best way to diagnose elevated 4xx and 5xx error rates from Acquia logs?▼

Diagnosing elevated 4xx and 5xx error rates from Acquia logs involves ingesting apache-access logs, running a Python analysis script on the JSON export, and formatting the summary into a readable health dashboard.

Do I need Cloudflare API credentials to run an incident triage on my site health?▼

Cloudflare API credentials are optional for site health incident triage; the analysis skips the Cloudflare threat visibility section automatically if CF_API_TOKEN and CF_ZONE_ID are not provided in the environment.

How do I generate a shareable HTML dashboard from command line log analysis output?▼

Generating a shareable HTML dashboard from log analysis output involves running the bundled Python script on collected JSON logs and formatting the resulting JSON summary into a standalone HTML file for stakeholder distribution.

What format do access logs need to be in for site health analysis scripts to process them?▼

Access logs must be collected into JSON format for site health analysis scripts to process them, using Acquia acli/logstream exports or Cloudflare API data formatted as JSON input paths for the analysis script.