using calamaris to parse squid logs

ESGLinux esggrupos at gmail.com
Thu May 7 15:24:26 UTC 2009


Hello All,

someone uses calamaris to parse squid logs?

I try to use it but it doesn´t work for me.

When i try to run it with the command:

 cat /var/log/squid/access.log | /usr/bin/calamaris -f auto -a -F mail

I get the error:

/usr/bin/calamaris: I don't know this input format. Please check the
input. If you're sure that the following line is NOT corrupt and the error
also occurs with the recent version of Calamaris (see the README for
pointers
and known bugs) then report it with the following line to
<Calamaris-bug at Cord.de>. Thank You.

192.168.1.24 - - [03/May/2009:04:09:40 +0200] "GET
http://forecastfox.accuweather.com/adcbin/forecastfox/weather_data.asp?
HTTP/1.1" 200 3724 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; es-ES;
rv:1.8.1.20) Gecko/20081217 Firefox/2.0.0.20" TCP_MISS:DIRECT

the format I use in squid is:


logformat combined %>a %ui %un [%tl] "%rm %ru HTTP/%rv" %Hs %<st
"%{Referer}>h" "%{User-Agent}>h" %Ss:%Sh
access_log /var/log/squid/access.log combined

I use this format to use webalizer and awstats to view the usage of the
proxy.

What log format is necessary to use so it works with, webalizer, awstats and
calamaris?

thanks  in advance

ESG



More information about the redhat-list mailing list