On Wed, 17 Mar 2010 19:55:54 +0000, Alex <lbf@xxxxxxxxxxxxxxxx> wrote: > Hello, > > Firstly, am loving Squid. I never knew caching was going to be so much fun. > > I'm using Debian Lenny's squid (Version 3.0.STABLE8) and having problems > with the GET args being truncated from the logs. As in, if I'm requesting: > > GET http://example.com/?output=rss > > This comes through in the logs as: > > GET http://example.com/? > > I'm trying to recreate apache2 vhost logs and using the logformat: > > logformat combined_vhost %{Host}>h %>a %ui %un [%tl] "%rm %ru HTTP/%rv" > %Hs %<st "%{Referer}>h" "%{User-Agent}>h" %Ss:%Sh %tr > > I thought I could be clever and extract the full GET URL from the > headers "%rm %{GET}>h HTTP/%rv" but this seems to substitute the "-" > char and wouldn't log posts anyway. > > Any ideas? http://www.squid-cache.org/Doc/config/strip_query_terms/ Amos