Linux – How to Add Date and Time to Squid Log

linuxloggingsquid

The standard squid log format writes time in seconds from epoch. How to add date and time in a human readable format?

Add these to squid.config file:

logformat timereadable %tl %6tr %>a %Ss/%03Hs %<st %rm %ru %un %Sh/%<A %mt
access_log daemon:/var/log/squid/access.log timereadable

then restart squid:

systemctl restart squid //for debian

Make sure the path were file is to be written exists.

As of GNU coreutils 7.5 released in August 2009, sort allows a -h parameter, which allows numeric suffixes of the kind produced by du -h:

du -hs * | sort -h

If you are using a sort that does not support -h, you can install GNU Coreutils. E.g. on an older Mac OS X:

brew install coreutils
du -hs * | gsort -h

From sort manual:

-h, --human-numeric-sort compare human readable numbers (e.g., 2K 1G)

Something like

perl -p -e 's/^([0-9]*)/"[".localtime($1)."]"/e' < access.log

could help you with the last part (tail-ing the log). Found it on a Squid mailing list.