{
  "raw_files_parsed": [
    "access_log.03-04-26.gz",
    "access_log.03-12-26.gz",
    "access_log.03-13-26.gz",
    "access_log.03-14-26.gz",
    "access_log.04-30-26.gz",
    "access_log.05-01-26.gz",
    "access_log.05-08-26.gz",
    "access_log.05-12-26.gz"
  ],
  "workers_requested": 12,
  "analysis_filter": "asn22284",
  "filter_mode": "ip_set",
  "total_raw_lines_seen": 361642482,
  "parsed_lines": 187,
  "unmatched_lines": 0,
  "time_filtered_lines_excluded": 0,
  "filtered_out_lines": 361642295,
  "duplicate_lines_skipped": 0,
  "event_identity": "source_file + source_line_number; exact duplicate-looking lines are retained",
  "min_timestamp_local": "2026-03-03 12:07:01",
  "max_timestamp_local": "2026-05-11 05:40:06",
  "parse_errors_by_file": {},
  "total_bytes_decimal_GB": 14.498545971,
  "dedupe_sqlite_used": false,
  "active_log_included": true,
  "active_overlap_policy": "exclude-covered",
  "log_format_interpretation": "custom RockyWeb nginx format with quoted remote_addr and four quoted fields after body_bytes_sent; actual user-agent is the third post-byte quoted field",
  "rfc1918_policy": "RFC1918 is detected only from 10.0.0.0/8, 172.16.0.0/12, and 192.168.0.0/16; other non-public addresses are separate."
}