1

In squid.conf we have some

http_access deny ACL

catching a lot of connection attempts, so filling the access.log with TCP_DENIED lines.

It is normal behaviour, but too much verbose for us. Is it possible to avoid logging these ones ?

best regards, Sala

Improve this question

2 Answers 2

Reset to default
2

The access_log directive in squid.conf defines where and how access.log data is to be logged. This directive can be followed with a list of ACLs which all must match for any given request to be logged to that output. http://www.squid-cache.org/Doc/config/access_log/

You can do it like this:

 acl dontLog http_status 403
 access_log none dontLog
 access_log stdio:/var/log/squid/access.log squid

... or like this:

 acl dontLog http_status 403
 access_log stdio:/var/log/squid/access.log squid !dontLog
Improve this answer
1
2

Each HTTP request made through proxy should be logged in the proxy access log with the appropriate status, so squid does log it. So - nope, there is no such way, if you intend to use squid only. You can, however, set a fifo socket with a reader application from it as a log file for squid, and then manipulate the squid log lines in your log reader application, aggregating them in any way you want.

Improve this answer
2
  • I see, but we don't want to log the domains we block. For us there are policies about the web pages do users request and get, no others.
    – Massimo
    Commented Aug 25, 2016 at 22:11
  • write your own logging module for squid then. default logging module fits 99% of squid users.
    – drookie
    Commented Aug 26, 2016 at 6:26

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .