Squid Log Rotation and Sarg

squid

We have just setup squid as our proxy, and i was going to use Sarg to analyze the log files. I had initially set the Squid logs to rotate everyday so they dont get huge. The problem is i cant see an option in the squid config to read a folder full of squid log files (say *.log).

Is there an easy way to do this or am i going to have to write a bash script or something to process them all into one before i get squid to read it?

Cheers
Luke

Best Answer

Well, first things first. The software that rotate your logs probable isn't squid itself. Most probably is logrotate. Second. why do you want squid be able to read the full squid log folder: is Sarg who need it to read the access.log file. And AFAIK Sarg can process only access.log So you need to go into logrotate config and change it to fit your needs. If you have problems with the size logrotate has an option for compressing logs.

Related Solutions

Mysql – Logging to MySQL without empty rows/skipped records

the correct php code for you is:

#!/usr/bin/php

<?php

error_reporting(0);

if (! defined(STDIN)) {
    define("STDIN", fopen("php://stdin", "r"));
}

$res = mysql_connect('127.0.0.1', 'root', 'kbpbdxgh9j');
$dbres = mysql_select_db('intranet', $res);

while (!feof(STDIN)) {
    $line = trim(fgets(STDIN));
    $fields = explode(' ', $line);
    $user = rawurldecode($fields[0]);
    $cli_ip = rawurldecode($fields[1]);
    $protocol = rawurldecode($fields[2]);
    $uri = rawurldecode($fields[3]);

    if ($user!="") {

        $q = "INSERT INTO log (usuario, ip, protocolo, url) VALUES ('".$user."', '".$cli_ip."', '".$protocol."', '".$uri."');";
        mysql_query($q) or die (mysql_error());

    if ($fault) {
                fwrite(STDOUT, "ERR\n");
        };

    }

    fwrite(STDOUT, "OK\n");
}

Linux – squid cache shutting down error

you have GET http://server1:82/MWL/C1_MWL_7_0.css that is a request to server1 on port 82, but in squid config http_access deny !Safe_ports says to deny access to any other than safe ports.

Add port 82 as safe port also and squid -k reconfigure or restart squid.

Best Answer

Related Solutions

Mysql – Logging to MySQL without empty rows/skipped records

Linux – squid cache shutting down error

Related Topic