Of course, the world is not limited to just nginx. As soon as the Web server allows sending access logs via the syslog protocol, Ballcone should handle it well.

Of course, the world is not limited to just nginx. As soon as the Web server allows sending access logs via the syslog protocol, Ballcone should handle it well. Well, nginx is my usual choice, so I focused on supporting it first. As far as I know, haproxy allows it, too, but I have not tried it yet. An embedded database is used intentionally. Not just because I like them, but because I am inspired by the services like Cockpit (https://cockpit-project.org/ https://cockpit-project.org/) that provides a Web console to the server on SSH login. Scaling is an excellent question. My preliminary tests showed that MonetDBLite handled approximately 500–700 inserts per second on a small Linux virtual machine with HDD. Larger scales require specialized solutions like ClickHouse or Vertica. Just in case, Ballcone supports gathering data from multiple remote hosts.