I used this line to extract unique IPs from my access\_log for the last minute:

```
grep "2017:19:23" /var/log/nginx/access_log | awk '{print $2}' | sort -n | uniq -c | sort -nr | head -20000 | wc -l

```

Result: 185

I then tried again for 10 seconds:

```
grep "2017:19:23:0" /var/log/nginx/access_log | awk '{print $2}' | sort -n | uniq -c | sort -nr | head -20000 | wc -l

```

Result: 74

What does google analytics realtime tell me? 37. I've not seen it go over 50 all day and I'm confident that at time my concurrent users has been more like 200+.

Any idea why this would be?