Ne PFsense installation - couple of questions
-
Have a new pfsense installation and I am really impressed with the interface and simplicity of setup. Couple of quick questions - I have used the search function but am still unsure of a few things:
If I want to use a remote log server like kiwi syslog will I still be able to use a package like lightsquid or Sarg for monitoring?
Since I am only going to use this as a web traffic/intrusion log system is there a better option between the two? I understand Sarg is a bit more complicated but if it is a superior product with the right config its a no-brainer for me.
Thanks in advance!
-
Squid logs locally to its own log, not syslog, so the remote syslog options do not affect squid's logging or reporting for sarg/lightsquid.
I prefer lightsquid myself, but sarg can generate some more interesting reports. Careful with sarg though, as I have seen it fill up hard drives on numerous occasions when customers had it configured to keep many old reports.