=== date range per log file ===
--- access.log ---
20/08/2026:00:00:04 +0000
20/08/2026:08:03:25 +0000
--- access.log.1 ---
16/08/2026:00:00:00 +0000
19/08/2026:23:59:56 +0000
--- access.log.2.zst ---
13/08/2026:00:00:04 +0000
16/08/2026:00:00:00 +0000
--- access.log.3.zst ---
09/08/2026:00:00:00 +0000
12/08/2026:23:59:58 +0000

=== 1.5 ATTRIBUTION — who makes the requests, by source IP + token + user agent ===
--- window slice: 18/08 from 09:51 onward, 19/08 all, 20/08 to now ---
      5 10.77.0.3 [18/08/2026:12:52:31 libwww-perl/6.78
      5 10.77.0.3 [16/08/2026:18:52:31 libwww-perl/6.78
      5 10.77.0.3 [16/08/2026:12:52:31 libwww-perl/6.78
      5 10.77.0.2 [20/08/2026:08:02:09 libwww-perl/6.78
      5 10.77.0.2 [20/08/2026:07:52:09 libwww-perl/6.78
      5 10.77.0.2 [20/08/2026:07:47:09 libwww-perl/6.78
      5 10.77.0.2 [20/08/2026:07:42:09 libwww-perl/6.78
      5 10.77.0.2 [20/08/2026:06:32:09 libwww-perl/6.78
      5 10.77.0.2 [20/08/2026:05:27:09 libwww-perl/6.78
      5 10.77.0.2 [20/08/2026:05:22:09 libwww-perl/6.78
      5 10.77.0.2 [20/08/2026:05:17:09 libwww-perl/6.78
      5 10.77.0.2 [20/08/2026:04:12:09 libwww-perl/6.78
      5 10.77.0.2 [18/08/2026:03:54:55 libwww-perl/6.78
      5 10.77.0.2 [15/08/2026:22:34:57 libwww-perl/6.78
      5 10.77.0.2 [15/08/2026:12:54:56 libwww-perl/6.78
      5 10.77.0.2 [15/08/2026:09:29:56 libwww-perl/6.78
      5 10.77.0.2 [15/08/2026:08:04:56 libwww-perl/6.78
      5 10.77.0.2 [14/08/2026:23:04:56 libwww-perl/6.78
      5 10.77.0.2 [14/08/2026:19:24:56 libwww-perl/6.78
      5 10.77.0.2 [14/08/2026:18:29:56 libwww-perl/6.78

=== request TOTALS in the elapsed window (18/08 09:51Z -> now) ===
   3538 17/08/2026 13
   3538 17/08/2026 14
   3538 17/08/2026 15
   3548 17/08/2026 16
   3538 17/08/2026 17
    673 17/08/2026 18
    335 18/08/2026 03
   3546 18/08/2026 04
   3538 18/08/2026 05
   3546 18/08/2026 06
   3536 18/08/2026 07
   3538 18/08/2026 08
   3546 18/08/2026 09
   3550 18/08/2026 10
   3546 18/08/2026 11
   3543 18/08/2026 12
   3540 18/08/2026 13
   3540 18/08/2026 14
   3540 18/08/2026 15
   3548 18/08/2026 16
   3540 18/08/2026 17
   3551 18/08/2026 18
   3540 18/08/2026 19
   3540 18/08/2026 20
   3540 18/08/2026 21
   3550 18/08/2026 22
   3540 18/08/2026 23
   3550 19/08/2026 00
   3540 19/08/2026 01
   3540 19/08/2026 02
   3540 19/08/2026 03
   3553 19/08/2026 04
   3540 19/08/2026 05
   3552 19/08/2026 06
   3540 19/08/2026 07
   3540 19/08/2026 08
   3540 19/08/2026 09
   3546 19/08/2026 10
   3540 19/08/2026 11
   3546 19/08/2026 12
   3540 19/08/2026 13
   3540 19/08/2026 14
   3540 19/08/2026 15
   3548 19/08/2026 16
   3540 19/08/2026 17
   3548 19/08/2026 18
   3540 19/08/2026 19
   3540 19/08/2026 20
   3540 19/08/2026 21
   3548 19/08/2026 22
   3540 19/08/2026 23
   3548 20/08/2026 00
   3540 20/08/2026 01
   3540 20/08/2026 02
   3540 20/08/2026 03
   3546 20/08/2026 04
   3540 20/08/2026 05
   3546 20/08/2026 06
   3539 20/08/2026 07
    209 20/08/2026 08

=== 1.6 BACKUP ACTIVITY in the window — protocol upgrades / writes ===
     28 "POST /api2/json/admin/datastore/felhom-offsite/verify" 200 139
     28 "POST /api2/json/admin/datastore/felhom-offsite/verify" 200 131
      4 "GET //api2/json/reader?backup-id=9201&backup-time=1787025523&backup-type=ct&debug=true&ns=demo-hp&store=felhom-offsite" 101 0
      4 "GET //api2/json/reader?backup-id=9201&backup-time=1787025463&backup-type=ct&debug=true&ns=demo-felhom&store=felhom-offsite" 101 0
      4 "GET //api2/json/reader?backup-id=9201&backup-time=1786476553&backup-type=ct&debug=true&ns=demo-hp&store=felhom-offsite" 101 0
      1 "PUT /api2/json/admin/datastore/felhom-offsite/notes?backup-id=9201&backup-time=1787025523&backup-type=ct&notes=felhom+local-api&ns=demo-hp" 200 13
      1 "PUT /api2/json/admin/datastore/felhom-offsite/notes?backup-id=9201&backup-time=1787025463&backup-type=ct&notes=felhom+local-api&ns=demo-felhom" 200 13
      1 "POST /api2/json/admin/datastore/felhom-offsite/upload-backup-log?backup-id=9201&backup-time=1787025523&backup-type=ct&ns=demo-hp" 200 13
      1 "POST /api2/json/admin/datastore/felhom-offsite/upload-backup-log?backup-id=9201&backup-time=1787025463&backup-type=ct&ns=demo-felhom" 200 13
      1 "GET //api2/json/backup?backup-id=9201&backup-time=1787025523&backup-type=ct&benchmark=false&debug=true&ns=demo-hp&store=felhom-offsite" 101 0
      1 "GET //api2/json/backup?backup-id=9201&backup-time=1787025463&backup-type=ct&benchmark=false&debug=true&ns=demo-felhom&store=felhom-offsite" 101 0
--- explicit: any line mentioning backup/upload/chunk/finish ---
2
