+ Post New Thread
Page 1 of 2 12 LastLast
Results 1 to 15 of 21
*nix Thread, Squid - Log Analysis in Technical; Can anybody recommend some software (for Ubuntu) that allows in depth analysis of Squid3 logs. Thanks,...
  1. #1

    Hightower's Avatar
    Join Date
    Jun 2008
    Location
    Cloud 9
    Posts
    4,920
    Thank Post
    494
    Thanked 690 Times in 444 Posts
    Rep Power
    241

    Squid - Log Analysis

    Can anybody recommend some software (for Ubuntu) that allows in depth analysis of Squid3 logs.

    Thanks,

  2. #2

    Geoff's Avatar
    Join Date
    Jun 2005
    Location
    Fylde, Lancs, UK.
    Posts
    11,803
    Thank Post
    110
    Thanked 583 Times in 504 Posts
    Blog Entries
    1
    Rep Power
    224
    SARG.

    SARG

    It should be in the Ubuntu Repo.

  3. #3

    Hightower's Avatar
    Join Date
    Jun 2008
    Location
    Cloud 9
    Posts
    4,920
    Thank Post
    494
    Thanked 690 Times in 444 Posts
    Rep Power
    241
    Any documentation for configuration?

  4. #4

    Geoff's Avatar
    Join Date
    Jun 2005
    Location
    Fylde, Lancs, UK.
    Posts
    11,803
    Thank Post
    110
    Thanked 583 Times in 504 Posts
    Blog Entries
    1
    Rep Power
    224
    Check the readme and the man page. Additionally, the configuration files are well commented.

  5. #5

    Hightower's Avatar
    Join Date
    Jun 2008
    Location
    Cloud 9
    Posts
    4,920
    Thank Post
    494
    Thanked 690 Times in 444 Posts
    Rep Power
    241
    Sorry - can't make head nor tail of it. Appreciate any help.

    P.S. looked at demo logs and its just the thing i'm after

  6. #6

    Geoff's Avatar
    Join Date
    Jun 2005
    Location
    Fylde, Lancs, UK.
    Posts
    11,803
    Thank Post
    110
    Thanked 583 Times in 504 Posts
    Blog Entries
    1
    Rep Power
    224
    Some specifics explaining exactly where your having issues would be helpful.

  7. #7

    Hightower's Avatar
    Join Date
    Jun 2008
    Location
    Cloud 9
    Posts
    4,920
    Thank Post
    494
    Thanked 690 Times in 444 Posts
    Rep Power
    241
    Quote Originally Posted by Geoff View Post
    Some specifics explaining exactly where your having issues would be helpful.
    It certainly would - my bad. Was busy having a play about with it.

    I have Squid3 installed and have just installed sarg. Been into the conf and changed some things to suit (and you were right, it is very well documented) when I found the file which was in /etc/squid

    When I browse to http://IPofSquidServer/squid-reports I just get an empty directory - surely this should be populated already with some information.

    To be honest, I'm not sure if Squid is set up to produce logs (is this done by default)

  8. #8

    RabbieBurns's Avatar
    Join Date
    Apr 2008
    Location
    Sydney
    Posts
    5,512
    Thank Post
    1,320
    Thanked 469 Times in 306 Posts
    Blog Entries
    6
    Rep Power
    199
    I use SARG via webmin

    It makes it really simple to use.

  9. #9

    Hightower's Avatar
    Join Date
    Jun 2008
    Location
    Cloud 9
    Posts
    4,920
    Thank Post
    494
    Thanked 690 Times in 444 Posts
    Rep Power
    241
    Quote Originally Posted by RabbieBurns View Post
    I use SARG via webmin

    It makes it really simple to use.
    Don't want to use webmin.

  10. #10

    Geoff's Avatar
    Join Date
    Jun 2005
    Location
    Fylde, Lancs, UK.
    Posts
    11,803
    Thank Post
    110
    Thanked 583 Times in 504 Posts
    Blog Entries
    1
    Rep Power
    224
    Quote Originally Posted by Hightower View Post
    It certainly would - my bad. Was busy having a play about with it.

    I have Squid3 installed and have just installed sarg. Been into the conf and changed some things to suit (and you were right, it is very well documented) when I found the file which was in /etc/squid

    When I browse to http://IPofSquidServer/squid-reports I just get an empty directory - surely this should be populated already with some information.

    To be honest, I'm not sure if Squid is set up to produce logs (is this done by default)
    1) Sarg will only produce some reports after it's been run, normally this is done via cron. Have you attempted to run sarg manually?

    2) Squid spits it's logs out to /var/log/squid/. In particular there should be a human readable access.log in that location. Go check.

  11. #11

    Hightower's Avatar
    Join Date
    Jun 2008
    Location
    Cloud 9
    Posts
    4,920
    Thank Post
    494
    Thanked 690 Times in 444 Posts
    Rep Power
    241
    Quote Originally Posted by Geoff View Post
    1) Sarg will only produce some reports after it's been run, normally this is done via cron. Have you attempted to run sarg manually?

    2) Squid spits it's logs out to /var/log/squid/. In particular there should be a human readable access.log in that location. Go check.
    There is a access log there with plenty of entries.

    How do I run it manually (sorry for my ignorance)

  12. #12

    Hightower's Avatar
    Join Date
    Jun 2008
    Location
    Cloud 9
    Posts
    4,920
    Thank Post
    494
    Thanked 690 Times in 444 Posts
    Rep Power
    241
    Sorry - ran it - sorted!

    Is a cron job created automatically, or is it something for me to set up.

    If so, how often should I run this?

  13. #13

    Geoff's Avatar
    Join Date
    Jun 2005
    Location
    Fylde, Lancs, UK.
    Posts
    11,803
    Thank Post
    110
    Thanked 583 Times in 504 Posts
    Blog Entries
    1
    Rep Power
    224
    Assuming you've edited the sarg.conf correctly:
    Code:
    /usr/sbin/sarg-reports today
    Will produce a report for today.

  14. #14

    Geoff's Avatar
    Join Date
    Jun 2005
    Location
    Fylde, Lancs, UK.
    Posts
    11,803
    Thank Post
    110
    Thanked 583 Times in 504 Posts
    Blog Entries
    1
    Rep Power
    224
    There are cron jobs setup by default for daily/weekly/monthly. Your web server folder will be populated with reports automagically. The only thing you need to keep an eye on is the amount of reports, I had my proxy die from the hard drive being full of sarg reports once

  15. Thanks to Geoff from:

    Hightower (4th February 2009)

  16. #15

    Hightower's Avatar
    Join Date
    Jun 2008
    Location
    Cloud 9
    Posts
    4,920
    Thank Post
    494
    Thanked 690 Times in 444 Posts
    Rep Power
    241
    Thanks Geoff - much appreciated.

SHARE:
+ Post New Thread
Page 1 of 2 12 LastLast

Similar Threads

  1. Performance Analysis
    By kiran in forum MIS Systems
    Replies: 1
    Last Post: 24th January 2009, 11:28 AM
  2. Peformance analysis
    By lancaster.david in forum MIS Systems
    Replies: 0
    Last Post: 24th May 2007, 01:17 PM
  3. CMIS Analysis
    By Kained in forum MIS Systems
    Replies: 0
    Last Post: 25th April 2007, 09:41 AM
  4. Format of Squid log time stamp
    By ITWombat in forum Web Development
    Replies: 6
    Last Post: 2nd July 2006, 07:36 PM
  5. Logfile analysis
    By iking in forum How do you do....it?
    Replies: 20
    Last Post: 28th December 2005, 03:54 PM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •