Squid --> Access log target

[mokaz]

Hi all,

I would like to be able to "double" the access logs whenever possible:

1 - per Syslog facility and further sent to remote log aggregation.
2 - per File (/var/log/squid/access.log) to crawl the logs with SARG locally.

Perhaps I could do the point #2 using syslog datas but I wouldn't know "how" just yet.
If anyone could give some hints, thanks a lot.

Let me know,
Kind regards,
m.

[pheriko]

Hi.

Don't see the point, but you will need to do it manually, for example create a cron job to copy the access log to any other system(rsync not available) before log rotation(midnight) every day.

Leave log rotation locally.

PM.