I have recently setup a central log server on my network and would like to forward entries in /var/log/squid/access.log to my log server for further analysis and manipulation on my log server. I am forwarding syslog to my log server already; however squid isn't logging access entries through syslog as far as I know. I have tried to add the line ' access_log syslog squid' to a custom template however 'squid -k reconfigure
returns an error 'parseConfigFile: line 46 unrecognized: 'access_log syslog squid''. What is the best way to forward the log? Should I add the -s argument to the /etc/init.d/squid file to enable syslog logging. Will that only log to syslog without logging to the current subset of logs?
Thanks, solo
SME FTW