Squid logs to splunk



  • Hi,

    I am pretty new to pfsense and am using squid to monitor web traffic on my LAN. I am also using splunk to visualize the syslogs from pfSense. I am running pfSense 2.3.-RELEASE-p1 and wondering if there is a way to get the squid access log forwarded to my splunk instance so I can see it there. Under the general tab I can see there is an option to change the access log file location, however I am not sure where to point it or if that is the correct way to go about it.

    Any help on this would be much appreciated.

    Thanks,
    Andy


Log in to reply