Tried to configure logging to syslog directly and experiencing issues with not accepted syslog priority assigned in config files. This is the configuration: ~# grep -E '^access_log|^icap_log|logstrmfilter' /etc/squid3/squid.conf access_log syslog:local7.notice logformat=combined3 acl logstrmfilter http_status 403 500- acl logstrmfilter2 http_status 200 404 300-304 access_log syslog:local7.err logformat=squidstrm logstrmfilter access_log syslog:local7.warning logformat=squidstrm !logstrmfilter2 icap_log syslog:local7.info icap_squid With aim to log all access entries to local7.notice, some errors to local7.err and not retrievable requests to local7.warning in addition to log ICAP to local7.info. But the syslog receives access logs at local7.debug, ICAP and the error filtered logs together at local7.info. Squid version 3.5.21. I want to forward those messages to remote syslog server for further processing. This is the motivation of this setup. Is there something I misunderstood in the access_log documentation? Seems there is no ACL filtering effective for syslog module. Peter _______________________________________________ squid-users mailing list squid-users@xxxxxxxxxxxxxxxxxxxxx http://lists.squid-cache.org/listinfo/squid-users
