Squid logs to splunk

  • Hi,

    I am pretty new to pfsense and am using squid to monitor web traffic on my LAN. I am also using splunk to visualize the syslogs from pfSense. I am running pfSense 2.3.-RELEASE-p1 and wondering if there is a way to get the squid access log forwarded to my splunk instance so I can see it there. Under the general tab I can see there is an option to change the access log file location, however I am not sure where to point it or if that is the correct way to go about it.

    Any help on this would be much appreciated.


Log in to reply