How to configure Squid to use syslogd server

Hi

I have a syslogd running on one machine and Squid server on other machine. My problem is how to configure Squid server to use syslogd server on remote machine.

Thanks

Shreekar
LVL 1
shreekarAsked:
Who is Participating?

[Product update] Infrastructure Analysis Tool is now available with Business Accounts.Learn More

x
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

GnsCommented:
man syslog.conf
look at how to forward the facility.priority to anothe machine. For instance, to forward all messages of the "warning" priority, you could do
*.warning: @theotherhost

-- Glenn
GnsCommented:
.... in /etc/syslog.conf ...

-- Glenn

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
S0larCommented:
I'll expand a bit Glenn's comment:

SQUID uses LOG_ERR and LOG_LOCAL4

So, put following line in syslogd.conf:
local4.* @some.other.host

---------
NOTE1: do not use high debug-level to save bandwidth
NOTE2: on other host syslogd should be run with -u option (AFAIR)

P.S. : re2Gns :)
Protecting & Securing Your Critical Data

Considering 93 percent of companies file for bankruptcy within 12 months of a disaster that blocked access to their data for 10 days or more, planning for the worst is just smart business. Learn how Acronis Backup integrates security at every stage

GnsCommented:
Thanks for the expaqnsion S0lar... Been a while since I ran a squid:-).

-- Glenn
shreekarAuthor Commented:
Hi

What configuration change to be made in Squid.cong for redirecting access.log to remote syslogd server??

Shreekar
S0larCommented:
squid just uses syslogd's log facilities. you need to edit /etc/syslog.conf
Ravi GoruTechnical ConsultantCommented:

while starting squid .. u need to use .. '-s' option .. so as to use  enable syslogging .. !!

and .. in the syslog.conf .. u need to mention .. the remote machine's name  or the log server . ;))

and .. on the log server.. u neeed to start the syslog daemon .. iwth .. '-u' option. ;!!

and let me know.. if at all its not happening .. i will cross check the docs again.. its quite sometime.. ;))

anyways best of luck ..!!

RaviGoru
GnsCommented:
Am I blind, or is this a threeway split?

-- Glenn
Karl Heinz KremerCommented:
No comment has been added lately, so it's time to clean up this TA.
I will leave a recommendation in the Cleanup topic area that this question is:
Split between Gns, S0lar and ravigoru
Please leave any comments here within the next seven days.

PLEASE DO NOT ACCEPT THIS COMMENT AS AN ANSWER!

khkremer
EE Cleanup Volunteer
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Linux

From novice to tech pro — start learning today.