[squid-users] squid syslog-ng, problem rotate

From: Luis Enrique Sanchez Arce <lesanchez_at_uci.cu>
Date: Sun, 3 Oct 2010 00:43:18 -0400 (CDT)

I have configured Squid to send the log to syslog.

I Use the following configuration:

access_log syslog squid

When squid rotate de log, stop send the log messages to syslog-ng
and starts sending messages to the /var/log/message file

In syslog-ng I have de following configuration:
A program that reads from standard input the line that squid send.

----------------------------------------------------------------------------------

source s_squid {
        # standard Linux log source (this is the default place for the syslog()
        # function to send logs to)
        unix-stream("/dev/log");
};

filter f_squid { program("squid") and match("TCP_|UDP_|ERR_");};

destination d_squid_prog {
        program("/usr/local/quota" template("$MSGONLY\n") log_fifo_size(50000));
};

log {
    source(s_squid);
    filter(f_squid);
    destination(d_squid_prog);
};

------------------------------------------------------------------------------------

Exist another way to read from standard input the squid access_log ?

Sorry for my english.
Received on Sun Oct 03 2010 - 04:43:31 MDT

This archive was generated by hypermail 2.2.0 : Sun Oct 03 2010 - 12:00:01 MDT