English Forums > Web Proxy Filtering and Caching

SQUID ACL category filtering logging

(1/1)

Azerty728:
Hello there,

Is there someone able to explain me how to enhance SQUID logs  to add the category that was filtered in the logs ?
I'm using ACLs from Lille University and filtering some categories. But when a connection is dropped/blocked by SQUID, I'm only getting TCP_DENIED. I want to know which category was blocked. Is this only possible ? And if yes, how ?
I receive my logs by syslog to my Splunk.
Thank you.

Amr:
hello Azerty,
in basic squid log this is not possible, however, you can use a third-party app to do so like solar winds',there's also open-source solutions like sarg or light squid they have nice features like top users and top sites and user usage but don't tell you most blocked category.

Navigation

[0] Message Index