Koozali.org: home of the SME Server

Contribs.org Forums => General Discussion => Topic started by: .solo on August 27, 2008, 07:59:27 PM

Title: Forwarding squid access.log to centralized log server
Post by: .solo on August 27, 2008, 07:59:27 PM

I have recently setup a central log server on my network and would like to forward entries in /var/log/squid/access.log to my log server for further analysis and manipulation on my log server.  I am forwarding syslog to my log server already; however squid isn't logging access entries through syslog as far as I know. I have tried to add the line ' access_log syslog squid' to a custom template however

Code: [Select]

'squid -k reconfigure returns an error 'parseConfigFile: line 46 unrecognized: 'access_log syslog squid''. What is the best way to forward the log? Should I add the -s argument to the /etc/init.d/squid file to enable syslog logging. Will that only log to syslog without logging to the current subset of logs?

Thanks, solo


SME FTW

Title: Re: Forwarding squid access.log to centralized log server
Post by: CharlieBrady on August 31, 2008, 05:51:05 AM

Quote from: .solo on August 27, 2008, 07:59:27 PM

I have tried to add the line ' access_log syslog squid' to a custom template however

Code: [Select]

'squid -k reconfigure returns an error 'parseConfigFile: line 46 unrecognized: 'access_log syslog squid''. What is the best way to forward the log?

squid version 2.5 does not have an option to log via syslog.

This is why not:

http://www.squid-cache.org/mail-archive/squid-users/200503/0041.html

Title: Re: Forwarding squid access.log to centralized log server
Post by: .solo on August 31, 2008, 06:14:45 AM

Thank you, thats exactly what I needed to know. I'll find another method.