Try https://goaccess.io/ https://goaccess.io/ works very well for us with haproxy cluster and rsyslog for central logging for all web and api requests. We run g

Try https://goaccess.io/ https://goaccess.io/ works very well for us with haproxy cluster and rsyslog for central logging for all web and api requests. We run goaccess in real-time mode processing 100000 requests per day with local ip to city database.