Calamaris would not generate reports if I change logformat.

linuxlover.chaitanya · 02-02-2009, 05:54 AM

Hello

I have squid running on two sites mainly for internet sharing and content filtering with dansguardian. I started using calamaris recently to view the log files. Till then I manually went through the file.
For my facility to understand the date and time of the log file I changed the default logformat in squid.conf file. Now it displays local time.
But this has triggered some problem and now calamaris can not understand the log file format I guess.
Is there any option where I can keep the log format settings in squid.conf file to display local time and still run calamaris?

linuxlover.chaitanya · 02-02-2009, 11:24 PM

I tried changing the log format to original that was there. But still calamaris gives me error.

Quote:

/usr/bin/calamaris: I don't know this input format. Please check the
input. If you're sure that the following line is NOT corrupt and the error
also occurs with the recent version of Calamaris (see the README for pointers
and known bugs) then report it with the following line to
<Calamaris-bug@Cord.de>. Thank You.

02/Feb/2009:09:04:18 +0530.308 485 192.168.1.58 TCP_MISS/200 1791 GET http://www.goal.com/css2_5/img/i/MC_en.gif - DIRECT/210.166.229.141 image/gif

linuxlover.chaitanya · 02-03-2009, 01:28 AM

Solved:
Just edited the command and mentioned the type of log file to be of squid explicitly.

Code:

calamaris -a -f squid -F html /var/log/squid/access.log

linuxlover.chaitanya · 02-06-2009, 12:02 AM

No. Suddenly calamaris has stopped working the way it was.

I think calamaris is unable to understand the log format once I change it to display the local time in time stamp rather than the epoch time.
Is there any way I can change the code for calamaris to make it understand the local time so that it can parse this time?

linuxlover.chaitanya · 02-09-2009, 07:00 AM

Now that. I got webmin and webalizer and it does not understand the log file format for local date as well. Any tool that can understand the local time in log file if I change the log format in squid configuration file?