Title: default squid log format Post by: jkimathi on Monday 25 January 2010, 04:01:20 am I am using Endian Firewall Community release 2.3.0; I have installed sarg to monitor where my users are going on the internet but results from sarg are not good. I have researched and the reason is that sarg only understands when output from /var/log/squid/access.log looks like
1264270408.839 21153 127.0.0.1 TCP_MISS/200 3235 CONNECT mail.google.com:443 - DIRECT/209.85.227.17 But the output from /var/log/squid/access.log on my current endian installation is Jan 23 20:13:29 firewall squid[6752]: 1264270408.839 21153 127.0.0.1 TCP_MISS/200 3235 CONNECT mail.google.com:443 - DIRECT/209.85.227.17 - Question: What can I set so that my output from /var/log/squid/access.log looks like line number two? i.e. how can I get the access.log to be only 1264270408.839 21153 127.0.0.1 TCP_MISS/200 3235 CONNECT mail.google.com:443 - DIRECT/209.85.227.17 - Without the following part? Jan 23 20:13:29 firewall squid[6752]: I hope I am clear. Please help. Regards, John. |