We use Squid for some of our proxy servers and I'm trying to make more sense of the logs.
A relatively new feature is the logformat part of squid.conf - amongst other things this lets you include the logtime as something recognisable rather than the Unix way of counting seconds since "day zero"
The default for "real" time gives
which is readable but won't import nicely into SQL (and if Squid could log to SQL then life would be so much better :-))Code:
11/Apr/2007:15:17:48 GMT Daylight Time
Has anyone used this? If so, can you tell me what I put in place of %tl to get a format like 2007-04-11 15:17:48
there are endless web sites which just reproduce the squid.conf file but it doesn't have any examples in it and I'm now stuck :-)