Last updated on September 30, 2020 by Dan Nanni
Once Nginx web server is up and running in a production environment, you will want to monitor its activity in real time. In fact, general network monitoring software such as Nagios, Zabbix, Munin provide support for real-time Nginx monitoring.
However, if you do not need comprehensive reporting capabilities or long-term statistics offered by such tools, but just want a quick and easy way to monitor the requests coming to an Nginx web server, I would recommend quick and easy command line tools. One such option for monitoring Nginx is
You will immediately tell that
ngxtop (both its name and interface) is inspired by the famous
top command. What
ngxtop does is to parse Nginx access log file (and others such as Apache2 log), and display analyzed results via
top-like interface in real-time. You can tout your sophisticated monitoring tool all you want, but it cannot beat
ngxtop's simplicity, and simplicity is not something that cannot be dismissed.
In this tutorial, I will describe how to monitor Nginx web server in real time with
First, install pip on your Linux system as a prerequisite for
ngxtop as follows.
$ sudo pip install ngxtop
The basic usage of
ngxtop is as follows.
ngxtop [options] ngxtop [options] (print|top|avg|sum) <var> ngxtop info
Here are some of the common options.
-l <file>: the full path to an access log file (Nginx or Apache2)
-f <format>: access log format
--no-follow: process the current log file snapshot, instead of new lines as they are written to the log file in real time
-t <seconds>: update interval
-n <number>: the number of lines in the display
-o <var>: ordering criteria (default: count)
-a <exp> ..., --a <exp> ...: add exp (must be aggregation exp: sum, avg, min, max, etc.) into output
-v: verbose output
-i <filter-expression>: only process records matched with filter
Here are built-in variables (represented as <var> in the above). Their meanings are self-explanatory.
ngxtop will try to detect the location of Nginx access log from its config file (
/etc/nginx/nginx.conf). Thus, to monitor Nginx, simply run:
It will display 10 requests served by Nginx, sorted by the number of requests.
To display top-20 most frequent requests:
$ ngxtop -n 20
To get information about Nginx (including available variable info):
$ ngxtop info
If you want, you can customize the variables to display. For that, simply list variables you are interested in.
$ ngxtop print request http_user_agent remote_addr
To display top IP addresses of clients:
$ ngxtop top remote_addr
To display requests whose status code is
$ ngxtop -i 'status == 404' print request status
ngxtop is capable of processing other log files, such as Apache access logs. To monitor Apache web server, use this command:
$ tail -f /var/log/apache2/access.log | ngxtop -f common