Hi Team,
I am working on data insights for my /var/log/nginx/access.log.
I tried many attempts but loki or prometheus didn’t provide me accurate data result,
e.g. when I count specific API calls (sap calls) with linux shell script, it give count 1290, but grafana chart shows me something 495 or some random number.
I tried multiple but could not get accurate data. How do I configure alloy so it will perfectly parse like linux shell script? to have accurate count?
sample data looks like below :
10.4.22.84 - - [24/Feb/2026:03:47:13 +0000] “GET /alfresco/service/com/alfresco/sap/http?info&pVersion=0046&contRep=K1&docId=42010A0416541FE184A6700B04B095AA&accessMode=r&authId=CN%3DOPQ,OU%3DI0020280205,OU%3DSAPWebAS,O%3DSAPTrustCommunity,C%3DDE&expiration=20260224054711&secKey=MIIBUwYJKoZIhvcNAQcCoIIBRDCCAUACAQExCzAJBgUrDgMCGgUAMAsGCSqGSIb3DQEHATGCAR8wggEbAgEBMHAwZDELMAkGA1UEBhMCREUxHDAaBgNVBAoTE1NBUCBUcnVzdCBDb21tdW5pdHkxEzARBgNVBAsTClNBUCBXZWIgQVMxFDASBgNVBAsTC0kwMDIwMjgwMjA1MQwwCgYDVQQDEwNPUFECCAogFQEgFAgBMAkGBSsOAwIaBQCgXTAYBgkqhkiG9w0BCQMxCwYJKoZIhvcNAQcBMBwGCSqGSIb3DQEJBTEPFw0yNjAyMjQwMzQ3MTFaMCMGCSqGSIb3DQEJBDEWBBQINpfLKzfK1Njsta7gUBpgNoDXxTAJBgcqhkjOOAQDBC8wLQIVAJTCHm15uaQQLVUlpYvjk21sTlL%2FAhQ9%2B3gaZA%2BUSBYaHdDw78UnavzbpA%3D%3D HTTP/1.0” 404 785 “-” “SAP NetWeaver Application Server (1.0;740)” “-” rt=1.181 urt=1.181 req_len=835 upstream=127.0.0.1:8080 content_type=text/html;charset=utf-8
10.4.49.35 - - [24/Feb/2026:03:47:13 +0000] “POST /auth/realms/alfresco/protocol/openid-connect/token?- HTTP/1.1” 200 1937 “-” “Apache-HttpClient/5.5 (Java/17.0.3)” “-” rt=0.048 urt=0.048 req_len=454 upstream=10.4.49.45:80 content_type=application/json
10.4.49.35 - - [24/Feb/2026:03:47:13 +0000] “POST /auth/realms/alfresco/protocol/openid-connect/token?- HTTP/1.1” 200 1933 “-” “Apache-HttpClient/5.5 (Java/17.0.3)” “-” rt=0.048 urt=0.047 req_len=454 upstream=10.4.49.45:80 content_type=application/json
10.4.22.131 - - [24/Feb/2026:03:47:13 +0000] “GET /alfresco/service/com/alfresco/sap/http?serverInfo&pVersion=0046&contRep=B1 HTTP/1.0” 200 306 “-” “SAP NetWeaver Application Server (1.0;740)” “-” rt=0.134 urt=0.134 req_len=209 upstream=127.0.0.1:8080 content_type=text/plain
10.4.49.35 - - [24/Feb/2026:03:47:13 +0000] “POST /auth/realms/alfresco/protocol/openid-connect/token?- HTTP/1.1” 200 1936 “-” “Apache-HttpClient/5.5 (Java/17.0.3)” “-” rt=0.049 urt=0.049 req_len=454 upstream=10.4.49.45:80 content_type=application/json
10.4.22.84 - - [24/Feb/2026:03:47:14 +0000] “GET /alfresco/service/com/alfresco/sap/http?info&pVersion=0046&contRep=K1&docId=42010A0416541FE184A6700B04B0B5AA&accessMode=r&authId=CN%3DOPQ,OU%3DI0020280205,OU%3DSAPWebAS,O%3DSAPTrustCommunity,C%3DDE&expiration=20260224054713&secKey=MIIBUwYJKoZIhvcNAQcCoIIBRDCCAUACAQExCzAJBgUrDgMCGgUAMAsGCSqGSIb3DQEHATGCAR8wggEbAgEBMHAwZDELMAkGA1UEBhMCREUxHDAaBgNVBAoTE1NBUCBUcnVzdCBDb21tdW5pdHkxEzARBgNVBAsTClNBUCBXZWIgQVMxFDASBgNVBAsTC0kwMDIwMjgwMjA1MQwwCgYDVQQDEwNPUFECCAogFQEgFAgBMAkGBSsOAwIaBQCgXTAYBgkqhkiG9w0BCQMxCwYJKoZIhvcNAQcBMBwGCSqGSIb3DQEJBTEPFw0yNjAyMjQwMzQ3MTNaMCMGCSqGSIb3DQEJBDEWBBTkujXJztSTDcMV23J%2FLXtbmmn0SzAJBgcqhkjOOAQDBC8wLQIVAIitUYMi2FRvIWIhNUy5zCRUtdl1AhQu3HR7Zlgol%2FO%2BD5MyceAOZEySFg%3D%3D HTTP/1.0” 404 785 “-” “SAP NetWeaver Application Server (1.0;740)” “-” rt=1.217 urt=1.217 req_len=835 upstream=127.0.0.1:8080 content_type=text/html;charset=utf-8
10.4.49.35 - - [24/Feb/2026:03:47:14 +0000] “POST /auth/realms/alfresco/protocol/openid-connect/token?- HTTP/1.1” 200 1946 “-” “Apache-HttpClient/5.5 (Java/17.0.3)” “-” rt=0.048 urt=0.049 req_len=454 upstream=10.4.49.45:80 content_type=application/json
10.4.22.84 - - [24/Feb/2026:03:47:14 +0000] “GET /alfresco/service/com/alfresco/sap/http?serverInfo&pVersion=0045&contRep=N1 HTTP/1.0” 200 306 “-” “SAP NetWeaver Application Server (1.0;740)” “-” rt=0.109 urt=0.108 req_len=209 upstream=127.0.0.1:8080 content_type=text/plain
10.4.49.35 - - [24/Feb/2026:03:47:14 +0000] “POST /auth/realms/alfresco/protocol/openid-connect/token?- HTTP/1.1” 200 1937 “-” “Apache-HttpClient/5.5 (Java/17.0.3)” “-” rt=0.049 urt=0.048 req_len=454 upstream=10.4.49.45:80 content_type=application/json
10.4.49.35 - - [24/Feb/2026:03:47:14 +0000] “POST /auth/realms/alfresco/protocol/openid-connect/token?- HTTP/1.1” 200 1940 “-” “Apache-HttpClient/5.5 (Java/17.0.3)” “-” rt=0.044 urt=0.044 req_len=454 upstream=10.4.49.45:80 content_type=application/json