v0.7.1 · updated 2026-09-05 · GitHub

top

Ranked inspector. read-only — never modifies the system.

Synopsis

caddy-analyze top [dimension] [source...] [flags]
caddy-analyze top -b <dimension> [source...]   # --by alias

Dimension defaults to path if omitted.

Flags

Flag	Short	Default	Description
`--by`	`-b`		Dimension alias for positional arg
`--top`	`-t`	10	Max entries (also global `--top`)

Inherits all global flags (--from, --country, --5xx, --format, etc. — see CLI Reference).

Dimensions

Dimension	Needs GeoIP	Description
`path`		Top requested paths
`ip`		Top client IPs
`ua`		Top user agents
`status`		Top status codes
`method`		Top HTTP methods
`host`		Top hosts
`bandwidth`		Top by response size
`country`	yes	Top countries (human-readable names)
`city`	yes, city MMDB	Top client cities
`asn`	yes	Top ASNs

Minimal example

read-only

caddy-analyze top ip testdata/sample.log
caddy-analyze top path -t 20 testdata/sample.log
caddy-analyze top country testdata/sample.log

Advanced example

read-only — filtered, formatted, file output.

caddy-analyze top path --5xx -t 20 -f csv -o top-5xx.csv testdata/sample.log
caddy-analyze top ip --from 1h --country IT -t 15 -f json testdata/large.log | jq
caddy-analyze top asn --no-bots --from 7d /var/log/caddy/access.log -f csv -o top-asn.csv