darold / squidanalyzer

Squid Analyzer parses Squid proxy access log and reports general statistics about hits, bytes, users, networks, top URLs, and top second level domains. Statistic reports are oriented toward user and bandwidth control.
http://squidanalyzer.darold.net/
126 stars 36 forks source link

No new log registered #124

Closed Didikkurniadi27 closed 8 years ago

Didikkurniadi27 commented 8 years ago

Hi,

I have problem with squidanalyzer. OS version : UBUNTU 8.10 Squid Version : 2.6 Squidanalyzer : 6.5

this is sample my access log from squid : 25022016 18:07:31 192.168.0.123 GET http://v4.moatads.com/pixel.gif? HTTP/1.1 448 http://webdesign.ittoolbox.com/groups/strategy-planning/development-projectmanagement/calculating-man-days-manmonths-and-calendar-days-758351 TCP_MISS:DIRECT 25022016 18:07:32 192.168.0.123 GET http://v4.moatads.com/pixel.gif? HTTP/1.1 448 http://webdesign.ittoolbox.com/groups/strategy-planning/development-projectmanagement/calculating-man-days-manmonths-and-calendar-days-758351 TCP_MISS:DIRECT

but when i execute command "squid-analyzer -c /etc/squidanalyzer/squidanalyzer.conf /var/log/squid/access.log -d -r" show log : No new log registered... and no log squid to be process. when i refresh my web server no show data.

Please what i can do ?

darold commented 8 years ago

Hi,

You need to change your squid log format. SquidAnalyzer only support native, common ir combined default squid log format. They are defined as foolow in your squid.conf file:

logformat squid          %ts.%03tu %6tr %>a %Ss/%03>Hs %<st %rm %ru %un %Sh/%<A %mt
logformat common     %>a %[ui %[un [%tl] "%rm %ru HTTP/%rv" %>Hs %<st %Ss:%Sh
logformat combined   %>a %[ui %[un [%tl] "%rm %ru HTTP/%rv" %>Hs %<st "%{Referer}>h" "%{User-Agent}>h" %Ss:%Sh

feel free to choose one of them, native squid format might be the best choice for speed.

Didikkurniadi27 commented 8 years ago

Thanks, its work :)