Take the 2-minute tour ×
Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Can anyone recommend me a good tool for analyzing squid logs ?

I'm currently using SARG. Is there something better?
I need to easily see what sites were visited/denied, when and by whom.

There is a list of squid analyzers. Some of them seem to be out of date.
Squid: Logfile Analysis

share

locked by HopelessN00b Mar 8 at 7:01

This question exists because it has historical significance, but it is not considered a good, on-topic question for this site, so please do not use it as evidence that you can ask similar questions here. This question and its answers are frozen and cannot be changed. More info: help center.

closed as off-topic by HopelessN00b Mar 8 at 7:00

This question appears to be off-topic. The users who voted to close gave this specific reason:

If this question can be reworded to fit the rules in the help center, please edit the question.

5 Answers 5

up vote 7 down vote accepted

I used LightSquid: http://lightsquid.sourceforge.net/ It was good enough for me for several reasons:

  • It is fast, takes very little diskspace (In comparison with SARG, only ~45Kb of Perl scripts)
  • There is nothing superfluous

You can try it, using online-demo: http://lightsquid.sourceforge.net/demo17/index.cgi?year=2005&month=04

"Official" feauture-list:

  • fast and simple install fast log
  • parser generatesmall per user data
  • file perl based cgi script for
  • dynamic generated report pages html
  • template for design no database
  • required no additional perl module
  • various reports user groups support
  • graphics report (v 1.6+) real name
  • (v 1.6+) multilangual interface
share
    
Is it still active? No update on website nor sourcecode since 2009. –  user130370 Dec 14 '12 at 10:15
    
Seems like the project is frozen since then. –  Alexey Shatygin Dec 31 '12 at 11:47

If you are looking for a security log analyzer, you will like OSSEC. It monitors the logs looking for multiple 404s, 500s, worm actions, etc. Great to detect internal compromises.

share

I use sarg, but for personal use i use sqview (http://github.com/mezgani/sqview/tree/master), and sometimes awk scripting that is very useful.

share

I use Free-SA which is similar to SARG but much faster and doesn't crash on huge log files. It works very well.

"Free-SA is statistic analyzer for daemons log files similar to SARG. Its main advantages over SARG are much better speed (7x-20x times), more reports support, crossplatform work and W3C compliance of generated HTML/CSS reports code."

share
    
I have managed to install this, and it looks great. Do you have any links to help on setting up cron tasks for it? –  UrkoM Mar 20 '12 at 1:37

Calamaris might provide what you're looking for. Handles many different types of logs, including squid.

share

Not the answer you're looking for? Browse other questions tagged or ask your own question.