EFW Support

Support => General Support => Topic started by: jkimathi on Monday 25 January 2010, 04:01:20 am



Title: default squid log format
Post by: jkimathi on Monday 25 January 2010, 04:01:20 am
I am using Endian Firewall Community release 2.3.0; I have installed sarg to monitor where my users are going on the internet but results from sarg are not good. I have researched and the reason is that sarg only understands when output from /var/log/squid/access.log looks like

1264270408.839 21153 127.0.0.1 TCP_MISS/200 3235 CONNECT mail.google.com:443 - DIRECT/209.85.227.17

But the output from /var/log/squid/access.log on my current endian installation is

Jan 23 20:13:29 firewall squid[6752]: 1264270408.839 21153 127.0.0.1 TCP_MISS/200 3235 CONNECT mail.google.com:443 - DIRECT/209.85.227.17 -

Question:
 What can I set so that my output from /var/log/squid/access.log
looks like line number two? i.e. how can I get the access.log to be only
1264270408.839 21153 127.0.0.1 TCP_MISS/200 3235 CONNECT mail.google.com:443 - DIRECT/209.85.227.17 -

Without the following part?
Jan 23 20:13:29 firewall squid[6752]:


I hope I am clear. Please help.
Regards,
John.