Re: [squid-users] Squid log formats - 2.5->2.6?

JPP wrote:
> On Mon, 16 Jun 2008 16:46:16 -0600, JPP wrote
>> On Tue, 17 Jun 2008 00:26:41 +0200, Henrik Nordstrom wrote
>>> On mån, 2008-06-16 at 11:21 -0400, Mike Diggins wrote:
>>>> Has something changed in the access log format between Squid
> 2.5Stable14
>>>> and 2.6Stable20? I'm just upgrading and noticed my webalizer can no
>> longer
>>>> parse the access.log file. It complains about the date which I believe
> is
>>>> the same on both (seconds since the Epoch).
>>>>
>>>> Error: Skipping record (bad date): [31/dec/1969:19:00:00 -0000] [68]
>>>>
>>>> In squid 2.6, I've picked the default squid format (logformat):
>>>>
>>>> logformat squid %ts.%03tu %6tr %>a %Ss/%03Hs %<st %rm %ru %un %Sh/%<A
> %mt
>>> Should work.
>>>
>>> Are you sure you told webalizer to parse a Squid access log in Squid
>>> native format, and not a common log format?
>>>
>>> Also try without the logformat directive. The "squid" format is
>>> built-in, and may differ sligtly if you redefine it with a logformat
>>> directive..
>>>
>>> Regards
>>> Henrik
>> Greetings all!
>>
>> To quickly chime in, I had a very similar problem and it turned out to be
> my
>> squid.conf file and the:
>> logformat squid %ts.%03tu %6tr %>a %Ss/%03Hs %<st %rm %ru %un %Sh/%<A %mt
>>
>> line. Believe it or not, there was a SPACE between 'squid' and '%ts' and
> the
>> result was a SPACE in the logs before the date started showing. Made me
> nuts
>> too until I started digging and on a lark, saw it, removed the space and it
>> started working again. I did not report it mainly because I had not seen
> any
>> others mentioning it, and figured it was some bonehead thing I did! Could
>> still be, of course.
>> Hopefully this may be your problem also. And hope it helps if it is!
>>
>> Regards,
>> JPP
>
> Sorry - let me be clearer - there were TWO spaces, the one space that is
> there is necessary, mine had an extra one.
>
> JPP
>

Thanks you very much for noticing that. I've committed a patch to
Squid-3 and Squid-2 to correct the config docs. It should percolate out
to any future releases.

Amos

-- 
Please use Squid 2.7.STABLE1 or 3.0.STABLE6