[SQU] log management policies

I know this may be slightly off-topic, but can anyone share some thoughts on
log management policies?

Do you process them onsite/offsite ?
Is it advisable to keep say, a weeks worth of logs online?
How often have you needed to check old logs?

I'm in the process of specifying a medium/large site with transparent
proxying, and I'm wondering about how much space I would need for the
logs...

If this is "very offtopic" please send any comments by email.

Thanks

Armando Reis

+---------------------------------------------------------+
| Armando Reis - Telepac S.A. - areis@tp.telepac.pt |
| PGP: 1987 6A35 261A 2A61 4605 28FD 4C26 28D3 88AA FE40 |
+----------------------Whish I could draw ASCII art-------+

--
To unsubscribe, see http://www.squid-cache.org/mailing-lists.html