Topic: sarg reports- need USERID rather than IP

[imcintyre]

Thx; I think I've got it right.

Regarding the existing data in the Sarg files, Does that have to be cleaned out or somehow refreshed to convert existing reports to have user names. I tried the command  usr/bin/sarg, the process ran but still have ip addresses instead of numbers.

Stupid Question time: A user has a windows xp username/password which may or may not be the same as the SME file server/email password. Will this cause a problem? Which name will be reported?

Thx in advance

Ian

[cjensen]

if you run the command:

Code: [Select]


[root@sme7test /]# /usr/bin/sarglog squid

the correct db enrties and template expansion should occur for what you want.

Take a look at the actual file:

Code: [Select]


[root@sme7test /]# vi /usr/bin/sarglog

#!/bin/sh

# select logfile for sarg
# support@dungog.net 2006

if [ "$1" = "squid" ] ; then
 /sbin/e-smith/db configuration setprop sarg logfile squid
 /sbin/e-smith/expand-template /etc/sarg/sarg.conf
 /sbin/e-smith/expand-template /etc/cron.daily/sarg
 /sbin/e-smith/expand-template /etc/cron.weekly/sarg
 /sbin/e-smith/expand-template /etc/cron.monthly/sarg
 echo "sarg to use squid logs"
 exit 1
fi

if [ "$1" = "dansguardian" ] ; then
 /sbin/e-smith/db configuration setprop sarg logfile dansguardian
 /sbin/e-smith/db configuration setprop sarg values abbreviation
 /sbin/e-smith/expand-template /etc/sarg/sarg.conf
 /sbin/e-smith/expand-template /etc/cron.daily/sarg
 /sbin/e-smith/expand-template /etc/cron.weekly/sarg
 /sbin/e-smith/expand-template /etc/cron.monthly/sarg
 echo "sarg to use dansguardian logs"
 exit 1
fi

echo "useage"
echo "sarglog (squid|dansguardian)"
exit 1

so you chose either 'squid' to setup as I and you want or 'dansguardian'. In each case the .conf, cron jobs, and db entries are altered for that choice. Nice option altering provided by dungog!

This may be what confused me with this contrib.  The simple commands above are all you need, nothing more.

Craig

[imcintyre]

Still getting only local ip addresses for users. I followed your previous post and it looked exactly right.

What should I check next?

[haymann]

Stupid Question time: A user has a windows xp username/password which may or may not be the same as the SME file server/email password. Will this cause a problem? Which name will be reported?

So that would mean the xp machine is not joined to the SME domain correct? I would guess (and it is just a guess) that for SARG to get the user names that the machine would have to be joined to the domain and logged into by a domain member, not a local account??
Ryan

[bpivk]

You can bind a specific ip to a computer MAC adress and enter names for those computers under hostnames and adresses and you should have names in your sarg log. (If you're not using a domain to log in.)

[imcintyre]

Thx for the suggestions, I have had some other issues and was not following this up. I will give your advice a try and post results here.

[tariqf]

I have a similar issue except I am getting "127.0.0.1" as my only ip address in "userid".

How can I get this to IP addresses of the machines or even better userid's?

I'm using dansguardian with idend on each of the xp machines.