You can also refer to this documentation for full details:

Here is a direct link to the PDF as well:

How to Monitor Apache Tomcat With Nagios XI.pdf

In this article, we’ll take a quick look at how it works and what it does, as well as provide links to detailed documentation and additional resources to help you make the most of your Apache webserver geoip data.

Using the Map Panel

Since the Logstash Geoip plugin and a GeoIP Filter are now loaded in Log Server by default, setup is as simple as creating a new Map panel in any custom Dashboards you’d like to visualize geoip data in. Full setup details to help you get it up and running in minutes can be found in this document:

Using the Map Panel in Nagios Log Server

Here’s a look at a custom Apache dashboard that incorporates the panel, along with several other useful panels to help you dig into your webserver data:

This article provides an overview of other valuable options you can incorporate to create an ultimate Apache Dashboard like the one above:

Create a Great Apache Dashboard in Nagios Log Server R2

Customizing the Look of Your Maps

The default MapLibre demotiles style is a great starting point, but many other options are available online. As long as the styles you wish to use meet the MapLibre style specifications, they should work. Here’s an example of four custom styles from maptiler.com:

Simply enter the style’s URL in the Tile API URL field, and (if it’s not part of the URL, which in the case of the above examples it is), then enter the API key in the Tile API Key field to leverage other options.

Getting Started

If you’re not already using Nagios Log Server, a great starting point would be to use the free 30-day, fully functional trial version:

Free Trial Download

We’d also be happy to offer you a custom Demo session to provide you with a guided tour of Log Server, or a Quickstart remote session with one of our support techs if you’d like some hands-on help with your trial setup.

If there’s any way we can be of help, please feel free to email us at sales@nagios.com so we can assist you further!

Setting up Your Apache Dashboard

Start Collecting Data

First off, you’ll need to set up your Apache webserver to send its logs upstream to your Log Server cluster. Simply click the green + Add Log Source button at the top of the interface and follow the instructions in the Apache Server section.

Build a Foundation and Save It

Once you have data coming in, navigate to Dashboards and select the built-in Nagios Log Server Search dashboard. Before making any changes, select Save as from the top menu and save the dashboard under a new name like Apache Dashboard, choosing either to save it as a personal dashboard (only visible to your login) or Global (visible to all Users).

Another approach would be to start with the built-in Empty Dashboard, but since Log Server Search already has an Events Over Time histogram panel and an All Events table, both of which we’ll want in our Apache dashboard, it saves time to start with it instead.

It’s also worth saving your Dashboard regularly as you build it, so you don’t lose any of your work if you bounce to another section of the interface accidentally.

Narrow the Field

Before we add panels, let’s narrow our results a bit to just focus on Apache logs. To do so, we’ll add two queries:

type: apache_access

type: apache_error

If there are other things you might like to see reflected in your Events Over Time histogram, you can add them as well. Things like the following simple queries might be worth paying attention to:

http.response.status_code:403

http.response.status_code:404

You can also simply click the 404 and 500 default query templates to load detailed queries focusing on those response codes and to use as a reference for creating your own more complex queries.

One advantage of combining multiple smaller queries is that the color you select for each query will appear in the Events Over Time panel, giving you quick visual insight into the volume of results reflecting each query:

Add Your Custom Panels

Now that we’ve created a basic dashboard and narrowed down the data set to relevant logs, it’s time to add a few key panels to our Apache Dashboard.

To add a panel, click the + sign on the upper right, at the top of the Row.

Note that when your new Panel populates to the dashboard, it will appear at the bottom of the Row, below the All Events table. Simply click the top of any Panel you wish to move and drag it to where you want to place it, and resize Panels as needed by clicking and dragging from the bottom-right or bottom-left corner.

The following three options are a great start for Apache data analysis:

http Response Codes

This panel will show you the http response codes generated by your webserver, helping you quickly identify things like broken pages (404 codes), visitors attempting to access unauthorized resources (403 codes), and webserver-side issues with completing requests (500 codes).

Field: http.response.status_code

Apache Hits

This panel will provide insight into the top IP addresses of visitors to your site. You can adjust the ‘Count’ field in the Edit Panel form to show more or less IPs.

Field: source.address

Top URLs

This panel will enable you to see the top URLs visited on your site, providing insight into everything from user behavior to code injection attempts.

Field: url.original

Add a Map

Another awesome panel for Apache data is the Map panel, which enables you to leverage geoip data in your Apache logs to visualize where hits are coming from geographically.

Field: source.geo.location

The Final Dashboard

With those panels added and customized, you now have a great Apache Dashboard to reference anytime you want to dig into the details.

You may also wish to get proactive alerts when certain events are collected, such as 404 response codes. You can learn more about turning queries into alerts in the following guide:

Alerting on Log Events with Nagios Log Server

You can learn more about creating and managing Dashboards and Queries here:

Analyzing Logs with Nagios Log Server R2

Finally, this article highlights all of the updates and enhancements in Nagios Log Server R2 in case you’re new to Log Server or are still running version 2024R1: