[afnog] Awstats and Squid logs - Resolved!

[Evelyn Namara]

Hello SM,

Thank you so much! You are absolutely correct.
I had forgotten to add combined on my access.log line;

Now this is the nature of my logs after the correction;

172.19.4.203 - - [09/Jun/2009:12:12:36 +0000] "GET http://41.202.216.30/iNotes/Forms5.nsf/h_ResourcesByName/SortArrow.gif/$FILE/SortArrow.gif? HTTP/1.1" 304 299 "http://41.202.216.30/mail/jbalepa.nsf/iNotes/Mail/?OpenDocument&PresetFields=s_ViewLabel;Courrier%20en%20arriv%C3%A9e,s_ViewName;%28%24Inbox%29&KIC&UNH=cf0bsmk3vrt5cu25kud08o17ibk" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; GTB5; Avant Browser; .NET CLR 1.1.4322; .NET CLR 2.0.50727; InfoPath.1)" TCP_MISS:DIRECT
172.19.4.203 - - [09/Jun/2009:12:12:36 +0000] "GET http://41.202.216.30/iNotes/Forms5.nsf/h_ResourcesByName/SortArrow.gif/$FILE/SortArrow.gif? HTTP/1.1" 304 299 "http://41.202.216.30/mail/jbalepa.nsf/iNotes/Mail/?OpenDocument&PresetFields=s_ViewLabel;Courrier%20en%20arriv%C3%A9e,s_ViewName;%28%24Inbox%29&KIC&UNH=cf0bsmk3vrt5cu25kud08o17ibk" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; GTB5; Avant Browser; .NET CLR 1.1.4322; .NET CLR 2.0.50727; InfoPath.1)" TCP_MISS:DIRECT\

Works like a charm!

Awstats is also now able to generate for me the statistics I needed!

Thank you.


-----Original Message-----
From: SM [mailto:sm at resistor.net]
Sent: 08 June 2009 18:30
To: Evelyn Namara; afnog at afnog.org
Subject: Re: [afnog] Awstats and Squid logs

At 07:54 08-06-2009, Evelyn Namara wrote:
>CI need some awstats users to help me out here. I have set up and
>used Awstats for for analyzing mostly http
>web traffic and it works perfectly.
>
>I wanted to have a similar setting for squid [ to have awstats
>analyze my proxy logs] since it says it has support for this too,
>but I have problems with my logformat.
>
>Here is my setup so far:
>
>In my awstats.conf file I have the following set:
>
>logformat=4 [ which should work for squid, according to the documentation]
>
>Then in my squid.conf;
>I added this combined log format;
>
>logformat combined %>a %ui %un [%{%d/%b/%Y:%H:%M:%S +0000}tl] "%rm
>%ru HTTP/%rv" %Hs %<st "%{Referer}>h" "%{User-Agent}>h" %Ss:%Sh

You forgot to add:

access_log /var/log/squid/access.log combined

Regards,
-sm



**************************************************
This message and any attachments (the "message") are confidential and intended solely for the addressees.
Any unauthorised use or dissemination is prohibited.
Messages are susceptible to alteration.
Orange Uganda Limited shall not be liable for the message if altered, changed or falsified.
If you are not the intended addressee of this message, please cancel it immediately and inform the sender.
**************************************************