Hi In this case I would recommend you talk to the Developer of SARG, he is a great guy, and I am sure he will help you out with your problem. Look at his site for his contact info, I feel I should not pass it to you without his permission, however I am sure he will take your questions with highest priority. http://sarg.sourceforge.net/ This is the site where you will get the contact info. I myself signed up for his Mailing list, but I also added him to my MSN messenger on which he immediately helped me out. Let me know if he settles your problem. Ben -----Original Message----- From: Ray La Peyre [mailto:ray.lapeyre@xxxxxxxxxxx] Sent: Wednesday, December 21, 2005 11:13 PM To: Benedek Frank; squid-users@xxxxxxxxxxxxxxx Subject: RE: FW: Live reports That's not the problem as I have authentication setup but also have that line as show anyway. I tried changing it to ignore with the same result. I have a large access.log would that stop it from working as its taking too long to generate? -----Original Message----- From: Benedek Frank [mailto:benedek.frank@xxxxxxxxxxxx] Sent: Wednesday, 21 December 2005 6:04 PM To: squid-users@xxxxxxxxxxxxxxx Subject: RE: FW: Live reports HI Yes I also had the same problem of not having Sarg showing any entries, and I found out together with the Developer, Pedro Orso, that my squid has no authentication, and sarg had the line realtime_unauthenticated_records: ignore and I had to change ignore to show. With that, now it shows all entries at the realtime report as well. So to be exact, change that ignore line to this: realtime_unauthenticated_records: show After that, when you restart apache, it should work. Of course this is provided that you have squid running, and it is not using authentication. Ben -----Original Message----- From: Ray La Peyre [mailto:ray.lapeyre@xxxxxxxxxxxxx] Sent: Tuesday, December 20, 2005 10:36 PM To: Benedek Frank; squid-users@xxxxxxxxxxxxxxx Subject: RE: FW: Live reports Its not that the log file is less than 1000 because if I put 10 in there it gives the same error message but with 10 after the SARG: File not found: instead of 1000 It seems that you have that line commented out which is what I had to do to get it to work. What do you do to view the live reports I go to http://localhost/sarg-php/sarg-realtime.php and get a page with some table headings but no information. I have not setup SARG to run on its own as of yet. I will set that up and maybe it will work after I do that. -----Original Message----- From: Benedek Frank [mailto:benedek.frank@xxxxxxxxxxxx] Sent: Tuesday, 20 December 2005 6:37 PM To: Ray La Peyre; squid-users@xxxxxxxxxxxxxxx Subject: RE: FW: Live reports Hi Hmm, quite strange. Here is the relevant part of my configuration on SARG. # realtime_access_log_lines 1000 # TAG: realtime_types: GET,PUT,CONNECT,ICP_QUERY,POST # Which records must be in realtime report. # realtime_types GET,PUT,CONNECT,ICP_QUERY,POST # TAG: realtime_unauthenticated_records: ignore|show # What to do with unauthenticated records in realtime report. # realtime_unauthenticated_records: show # TAG: byte_cost value no_cost_limit # Cost per byte. # Eg. byte_cost 0.01 100000000 # per byte cost = 0.01 # bytes with no cost = 100 Mb # 0 = disable # # byte_cost 0.01 50000000 As you can see, for me also realtime_access_log lines 1000 is set. Hmm, one thing that comes to my mind. Did you make sure that you have 1000 lines in your /var/log/squid/access.log file? Hmm. I don't know what else to suggest. For me also this was an error, and I corrected it by reinstalling the older version and then putting the new one back. Please let me know where else I can help, Ben -----Original Message----- From: Ray La Peyre [mailto:ray.lapeyre@xxxxxxxxxxxxx] Sent: Monday, December 19, 2005 10:49 PM To: Benedek Frank; squid-users@xxxxxxxxxxxxxxx Subject: RE: FW: Live reports I found where the problem is but not how to fix it. The line: realtime_access_log_lines 1000 in sarg.conf is what is causing the error. No matter what I put in here it gives the message of: SARG: File not found: Followed by whatever I put after the realtime_access_log_lines in the conf file. However if I comment out this line it works (but not the live reports). Could you see what yours is in your config? The rest is working fine except that I haven't yet got the live reporting working which is what I really want to use. Thanks Ray -----Original Message----- From: Benedek Frank [mailto:benedek.frank@xxxxxxxxxxxx] Sent: Monday, 19 December 2005 6:11 PM To: squid-users@xxxxxxxxxxxxxxx Subject: RE: FW: Live reports Hi I had that too. I don't remember how I fixed it. What is your distribution? Mine is Debian. I installed Sarg 2.09 I believe, and it worked like a charm. I installed it apt-get install sarg and it was very fine. Then I saw that 2.1 had the live report function, so I installed that on my Debian stable, but it needed new glibc 2.5, and that completely screwed up my distro. I had to browse, and install some other required packages, and now it seems to be stable. If you just want to get sarg running, I sugest install the package that is suitable for your distribution, and once it works, try to upgrade to the newest one. Sarg is a great tool, once its working. Let me know if you need more assistance, Ben -----Original Message----- From: Ray La Peyre [mailto:ray.lapeyre@xxxxxxxxxxxxx] Sent: Monday, December 19, 2005 1:56 AM To: Benedek Frank; squid-users@xxxxxxxxxxxxxxx Subject: RE: FW: Live reports Hi thanks for the reply I have installed SARG 2.1 but I don't believe that it is working properly. I have configured the sarg.conf file to what I want. However I don't believe that sarg is picking it up. If I run it using the sarg command with anything other than -h it gives an error of SARG: File not found: 1000 Also I think that it is supposed to create a directory in /var/www/html but only the sarg-php directory is created but not the squid-reports directory. I can do sarg -h and get a list of all the commands so the command is there but just not working right. What did you do to get it to work for you? Thanks for the help -----Original Message----- From: Benedek Frank [mailto:benedek.frank@xxxxxxxxxxxx] Sent: Monday, 19 December 2005 3:16 AM To: squid-users@xxxxxxxxxxxxxxx Subject: RE: FW: Live reports Hi I use SARG and it does a failry good job both analyzing the reports and create per user based reports, topusers, top downloads, etc. on the other hand, the newer version, 2.1 now has Realtime reports via PHP. That still isn't perfect, but you can see who is online at the moment. Ben -----Original Message----- From: Ray La Peyre [mailto:ray.lapeyre@xxxxxxxxxxxxx] Sent: Friday, December 16, 2005 5:24 AM To: squid-users@xxxxxxxxxxxxxxx Subject: FW: Live reports Hi all I have setup squid on a Red Hat 9 server using ldap authentication which is running successfully. I would like to know if there are any applications that can give a report on who is on the proxy at the moment is there a way to do this? I have installed squint which gives reports on the sites that users have gone to but this does not give current information only analysis of the log files. Any hints on what add-on would do this would be greatly appreciated Thanks for the help Ray
