> -----Original Message-----
> From: adam-s@pacbell.net [mailto:adam-s@pacbell.net]
> Sent: Sat, May 17, 2003 2:13p
> To: squid-users@squid-cache.org
> Subject: Re: [squid-users] script conv httpd log fmt -> squid native
>
>
> On Sat, 17 May 2003 13:01:31 -0700, you wrote:
> >I saw an awk script for squid native -> httpd native log format.
> >Does anyone have a similar script off hand to do the opposite?
> >
> >I usually like httpd format logs since _I_ can read the
> >logs directly, whereas, the squid native log format isn't so
> >easily human readable, but I want to run a report generator
> >that only groks squid format (yeah, I know there's a bunch that
> >only grok httpd format as well, but they didn't seem as directly
> >appropriate to what I wanted).
>
> A google groups search for awk+convert came up with two useful hits
> from the mailing list, the post by Peter Smith looks good:
> http://groups.google.com/groups?as_q=awk%20convert&as_ugroup=m
> ailing.unix.squid-users
--- That's the script I mentioned that converts squid native to httpd native -- i.e. already found that one, (surprisingly, via 'google'! :-)), thank you. I want to do the reverse. I like being able to 'vi' my logs and browse them with the date format being readable. > As to your original assertion about making the logs "easily readable," > the only thing cryptic is the UTCseconds timestamp which is easy to > filter. --- Maybe filterable, but not easily if I'm browsing the logs with vi/vim/gvim which is what I use about 80% of the time > The other values are just in a different order. ---- Order doesn't bother me. It's usually just date/time that are important so I can find the data/queries/replies I'm looking for. > Lastly, not sure what kind of report generator you are wanting or > since first you want httpd native format logs but then want a script > that "only groks squid format" but I find Calamaris, also linked from > the above squid Scripts url, very useful. --- I'm actually wanting to use Calamaris -- but my scripts are in httpd_native so I can read date/time. For each time I need to use calamaris (this is the first time), I've used vim on the logs directly to read info (where I need date/time to be readable) about 50-100 times. If my normal usage is to read logs with vim, having date/time be human readable is a great advantage. While I could hope that I could reach the advance skill of spock listening to binary code or mr. traitor in Matrix-1 who could just read the binary screens directly, I'm not quite at that level (besides, the reasoning of > The line I like to use is > "cat access.log | calamaris -a -O -c -U M > squidrep.out" as it gives > all reports (-a), sorts by size (-O), is case insesitive (-c), and > switches from K to MB, making for cleaner tables. What I liked about > Calamaris is it has few dependencies. I just downloaded it, ran the > script, put it in cron, and voila I had handy daily reports. > > anyhow do whatever you like - I hope some of the above proves useful, --- No...you're just making me drool/unhappy that I can't have my human readable time/date *and* calamaris reports (vegatarianism aside). It's really just the date/time format that I'm mostly unhappy with. -lindaReceived on Sat May 17 2003 - 21:12:21 MDT
This archive was generated by hypermail pre-2.1.9 : Tue Dec 09 2003 - 17:16:43 MST