|
Title: Sarg and EFW 2.2rc3 Post by: npeterson on Saturday 11 October 2008, 03:17:49 am I'm using the Sarg rpm from
http://www.stellarcore.net/projects/endian/ I'm getting an error No records found although it shows 200+ requests. I've tracked it down to the sarg configuration file, the line dansgaurdian_conf. I set this to none and it works ok. Now that i think of it I dont have content filtering on. That may be my issue. I'll test. Title: Re: Sarg and EFW 2.2rc3 Post by: entourage on Friday 17 July 2009, 01:20:52 am What package did you use from this site? He has 2 sections listed:
Updated RPM Packages for Endian 2.0 and Updated RPM Packages for Endian 2.2 but I only see the sarg rpm under the 2.0... Title: Re: Sarg and EFW 2.2rc3 Post by: entourage on Friday 17 July 2009, 06:17:20 am Ok, I went ahead and installed the rpm from the 2.0 folder and it seemed to work fine, however the date format is incorrect.
SARG wants mm/dd/yyyy and the access.log file is showing Jul 16 16:15:01 Any ideas on how to change the date format? Title: Re: Sarg and EFW 2.2rc3 Post by: entourage on Wednesday 22 July 2009, 12:50:13 am Update on my own post. I contacted the SARG guys and we figured out to use the access.log_short. Apparently the time needs to be in seconds for it to read correctly. I also commented out the Dansguardian log section of sarg.conf because I believe it was hanging the application.
Otherwise, I now have nice detailed and concise logs! Title: Re: Sarg and EFW 2.2rc3 Post by: jimmyzshack on Saturday 06 February 2010, 05:52:08 am Can anyone tell me how to install this package. i'm using the following. I'm confused on what rpm's to install
rpm -Uvh http://www.stellarcore.net/downloads/efw2.2-updates/clamav-0.94.2-1.endian4.i386.rpm Thanks, Title: Re: Sarg and EFW 2.2rc3 Post by: entourage on Tuesday 09 February 2010, 01:26:20 am The issue, if any, that I see with Sarg is that although it breaks down the sites my users go to individually, I still have a 'localhost' user (aka, the proxy) that lumps most of the browsing into itself.
I guess to me it skews the results... |