Topic: Forwarding squid access.log to centralized log server

[.solo]

I have recently setup a central log server on my network and would like to forward entries in /var/log/squid/access.log to my log server for further analysis and manipulation on my log server.  I am forwarding syslog to my log server already; however squid isn't logging access entries through syslog as far as I know. I have tried to add the line ' access_log syslog squid' to a custom template however

Code: [Select]

'squid -k reconfigure returns an error 'parseConfigFile: line 46 unrecognized: 'access_log syslog squid''. What is the best way to forward the log? Should I add the -s argument to the /etc/init.d/squid file to enable syslog logging. Will that only log to syslog without logging to the current subset of logs?

Thanks, solo


SME FTW

[CharlieBrady]

I have tried to add the line ' access_log syslog squid' to a custom template however

Code: [Select]

'squid -k reconfigure returns an error 'parseConfigFile: line 46 unrecognized: 'access_log syslog squid''. What is the best way to forward the log?

squid version 2.5 does not have an option to log via syslog.

This is why not:

http://www.squid-cache.org/mail-archive/squid-users/200503/0041.html

[.solo]

Thank you, thats exactly what I needed to know. I'll find another method.