Tail access log with fields

Stream IP, path, status code, and response size

tail -f /var/log/nginx/access.log | awk '{print $1, $7, $9, $10}'

More nginx commands

Count requests by status code

awk '{print $9}' /var/log/nginx/access.log | sort | uniq -c | sort -rn

Frequency of each HTTP status code in access log
Top 10 requested URLs

awk '{print $7}' /var/log/nginx/access.log | sort | uniq -c | sort -rn | head -10

Most popular request paths from access log
Top IPs by request count

awk '{print $1}' /var/log/nginx/access.log | sort | uniq -c | sort -rn | head -10

Top 10 client IPs hitting the server
Rate limiting config block

limit_req_zone $binary_remote_addr zone=api:10m rate=10r/s; limit_req zone=api burst=20 nodelay;

Limit to 10 req/s per IP with burst of 20 (add to http/server block)
Upstream health proxy pass

upstream backend { server 10.0.0.1:8080; server 10.0.0.2:8080 backup; keepalive 32; }

Round-robin upstream with backup and keepalive connections