Zentyal Forum, Linux Small Business Server
Zentyal Server => Installation and Upgrades => Topic started by: clicerioneto on September 04, 2009, 02:41:57 pm
-
Hi,
As the reports from the logs of the proxy does not have options such as: top sites, top user, list of blocked sites and also be very slow ... I'm trying to view logs using the tool SARG - http://sarg.sourceforge.net/sarg.php --
To Install
apt-get update
apt-get install sarg
In settings sarg.conf
/etc/squid/sarg.conf
the line below, I specify the path where the logs (squid or dansguardian ???)
# TAG: access_log file
# Where is the access.log file
# Sarg-l file
#
access_log /var/log/dansguardian/access.log
or
access_log /var/log/squid/access.log
Even in settings has sarg.conf option below:
# TAG: dansguardian_conf file
# DansGuardian.conf file path
# Generate reports from DansGuardian logs.
# Use 'none' to disable it.
# Dansguardian_conf /usr/dansguardian/dansguardian.conf
#
# dansguardian_conf none
I do not know if it is needed ???
#################
After running the command:
cd /var/log/dansguardian
#sarg -l access.log -l access.log.1 -l access.log.2 -l access.log.3 -l access.log.4 -l access.log.5
Go to Http:// ip /squid-reports
-
Hello,
I try to install SARG, but it still no work...
http://IP/squid-reports/
When i make a
#sarg -l access.log
and with a sudo .... no answer....
Any idea, is it working on your side??
How often the squid-reports is updated?
Many thx
-
Just install.
Then execute only the sarg command without any parameters.
Last, point your browser to http://ip/squid-reports (not https)
Don't forget to open the http port (80), or do whatever else is needed on your firewall
-
Hello
thx, it worked.... untill our serveur crashed....
i will reinstall on a new server next week. I let you know.
-
I also tried http://lightsquid.sourceforge.net/
I think it's better
The installation is just a little harder
-
I think, the best one is mysar
http://giannis.stoilis.gr/software/mysar/
It uses mysql as backend, it's more resources 'hungry', but you have everything in a RDBMS, and you can built your own applications to access all the logged information.
I have installed all the above, and the best is mysar. I also think, that it would be easy for the developers to include mysar in a future ebox release.
-
Good Day
Some updates, the sarg.conf files lives at
#/etc/sarg/sarg.cong
When I run the sarg -l access.log command, I get the following
root@emp-srv01:~# vi /etc/sarg/sarg.conf
root@emp-srv01:~# sarg -l access.log
SARG: Unknown option site_user_time_date_type table
SARG: File not found: access.log
I have hashed out the entry in the sarg.conf file, then it worked..?? But there isnt much info in the access.log files, is this because it is a transparent proxy?
-
Hi Geeks,
I thought of looking into http logs and what i saw is the URLs of http requests only in the logs... however the logs dont show the https URLs as such...
any help how could i monitor https requests?
Regards.