# Alloy config issue for my access logs **URL:** \ **Category:** PromQL\ **Created:** [February 24, 2026, 11:51am UTC](https://discuss.prometheus.io/t/alloy-config-issue-for-my-access-logs/3503 "2026-02-24T11:51:53Z")\ **Posts on this page:** 1\ **Page:** 1
**Author:** ![gkrse](https://avatars.discourse-cdn.com/v4/letter/g/b2d939/32.png) [@gkrse](https://discuss.prometheus.io/u/gkrse)\ **Post date:** [February 24, 2026, 11:51am UTC](https://discuss.prometheus.io/t/alloy-config-issue-for-my-access-logs/3503/1 "2026-02-24T11:51:53Z")
Hi Team, I am working on data insights for my /var/log/nginx/access.log. I tried many attempts but loki or prometheus didn’t provide me accurate data result, e.g. when I count specific API calls (sap calls) with linux shell script, it give count 1290, but grafana chart shows me something 495 or some random number. I tried multiple but could not get accurate data. How do I configure alloy so it will perfectly parse like linux shell script? to have accurate count? sample data looks like below : 10.4.22.84 - - [24/Feb/2026:03:47:13 +0000] “GET /alfresco/service/com/alfresco/sap/http?info&pVersion=0046&contRep=K1&docId=42010A0416541FE184A6700B04B095AA&accessMode=r&authId=CN%3DOPQ,OU%3DI0020280205,OU%3DSAPWebAS,O%3DSAPTrustCommunity,C%3DDE&expiration=20260224054711&secKey=MIIBUwYJKoZIhvcNAQcCoIIBRDCCAUACAQExCzAJBgUrDgMCGgUAMAsGCSqGSIb3DQEHATGCAR8wggEbAgEBMHAwZDELMAkGA1UEBhMCREUxHDAaBgNVBAoTE1NBUCBUcnVzdCBDb21tdW5pdHkxEzARBgNVBAsTClNBUCBXZWIgQVMxFDASBgNVBAsTC0kwMDIwMjgwMjA1MQwwCgYDVQQDEwNPUFECCAogFQEgFAgBMAkGBSsOAwIaBQCgXTAYBgkqhkiG9w0BCQMxCwYJKoZIhvcNAQcBMBwGCSqGSIb3DQEJBTEPFw0yNjAyMjQwMzQ3MTFaMCMGCSqGSIb3DQEJBDEWBBQINpfLKzfK1Njsta7gUBpgNoDXxTAJBgcqhkjOOAQDBC8wLQIVAJTCHm15uaQQLVUlpYvjk21sTlL%2FAhQ9%2B3gaZA%2BUSBYaHdDw78UnavzbpA%3D%3D HTTP/1.0” 404 785 “-” “SAP NetWeaver Application Server (1.0;740)” “-” rt=1.181 urt=1.181 req\_len=835 upstream=127.0.0.1:8080 content\_type=text/html;charset=utf-8 10.4.49.35 - - [24/Feb/2026:03:47:13 +0000] “POST /auth/realms/alfresco/protocol/openid-connect/token?- HTTP/1.1” 200 1937 “-” “Apache-HttpClient/5.5 (Java/17.0.3)” “-” rt=0.048 urt=0.048 req\_len=454 upstream=10.4.49.45:80 content\_type=application/json 10.4.49.35 - - [24/Feb/2026:03:47:13 +0000] “POST /auth/realms/alfresco/protocol/openid-connect/token?- HTTP/1.1” 200 1933 “-” “Apache-HttpClient/5.5 (Java/17.0.3)” “-” rt=0.048 urt=0.047 req\_len=454 upstream=10.4.49.45:80 content\_type=application/json 10.4.22.131 - - [24/Feb/2026:03:47:13 +0000] “GET /alfresco/service/com/alfresco/sap/http?serverInfo&pVersion=0046&contRep=B1 HTTP/1.0” 200 306 “-” “SAP NetWeaver Application Server (1.0;740)” “-” rt=0.134 urt=0.134 req\_len=209 upstream=127.0.0.1:8080 content\_type=text/plain 10.4.49.35 - - [24/Feb/2026:03:47:13 +0000] “POST /auth/realms/alfresco/protocol/openid-connect/token?- HTTP/1.1” 200 1936 “-” “Apache-HttpClient/5.5 (Java/17.0.3)” “-” rt=0.049 urt=0.049 req\_len=454 upstream=10.4.49.45:80 content\_type=application/json 10.4.22.84 - - [24/Feb/2026:03:47:14 +0000] “GET /alfresco/service/com/alfresco/sap/http?info&pVersion=0046&contRep=K1&docId=42010A0416541FE184A6700B04B0B5AA&accessMode=r&authId=CN%3DOPQ,OU%3DI0020280205,OU%3DSAPWebAS,O%3DSAPTrustCommunity,C%3DDE&expiration=20260224054713&secKey=MIIBUwYJKoZIhvcNAQcCoIIBRDCCAUACAQExCzAJBgUrDgMCGgUAMAsGCSqGSIb3DQEHATGCAR8wggEbAgEBMHAwZDELMAkGA1UEBhMCREUxHDAaBgNVBAoTE1NBUCBUcnVzdCBDb21tdW5pdHkxEzARBgNVBAsTClNBUCBXZWIgQVMxFDASBgNVBAsTC0kwMDIwMjgwMjA1MQwwCgYDVQQDEwNPUFECCAogFQEgFAgBMAkGBSsOAwIaBQCgXTAYBgkqhkiG9w0BCQMxCwYJKoZIhvcNAQcBMBwGCSqGSIb3DQEJBTEPFw0yNjAyMjQwMzQ3MTNaMCMGCSqGSIb3DQEJBDEWBBTkujXJztSTDcMV23J%2FLXtbmmn0SzAJBgcqhkjOOAQDBC8wLQIVAIitUYMi2FRvIWIhNUy5zCRUtdl1AhQu3HR7Zlgol%2FO%2BD5MyceAOZEySFg%3D%3D HTTP/1.0” 404 785 “-” “SAP NetWeaver Application Server (1.0;740)” “-” rt=1.217 urt=1.217 req\_len=835 upstream=127.0.0.1:8080 content\_type=text/html;charset=utf-8 10.4.49.35 - - [24/Feb/2026:03:47:14 +0000] “POST /auth/realms/alfresco/protocol/openid-connect/token?- HTTP/1.1” 200 1946 “-” “Apache-HttpClient/5.5 (Java/17.0.3)” “-” rt=0.048 urt=0.049 req\_len=454 upstream=10.4.49.45:80 content\_type=application/json 10.4.22.84 - - [24/Feb/2026:03:47:14 +0000] “GET /alfresco/service/com/alfresco/sap/http?serverInfo&pVersion=0045&contRep=N1 HTTP/1.0” 200 306 “-” “SAP NetWeaver Application Server (1.0;740)” “-” rt=0.109 urt=0.108 req\_len=209 upstream=127.0.0.1:8080 content\_type=text/plain 10.4.49.35 - - [24/Feb/2026:03:47:14 +0000] “POST /auth/realms/alfresco/protocol/openid-connect/token?- HTTP/1.1” 200 1937 “-” “Apache-HttpClient/5.5 (Java/17.0.3)” “-” rt=0.049 urt=0.048 req\_len=454 upstream=10.4.49.45:80 content\_type=application/json 10.4.49.35 - - [24/Feb/2026:03:47:14 +0000] “POST /auth/realms/alfresco/protocol/openid-connect/token?- HTTP/1.1” 200 1940 “-” “Apache-HttpClient/5.5 (Java/17.0.3)” “-” rt=0.044 urt=0.044 req\_len=454 upstream=10.4.49.45:80 content\_type=application/json