SquidGuard log to remote syslog server



  • I'm really struggling here and hope someone can guide me. I have remote logging working but the only, and second most important (to me) logging (proxy denies) does not come through.
    I tried updating syslog.conf, but upon restart the file gets over written. kinda expected that but hoped there was a manual way I can get the block.log sent to my remote destination.
    all my internet searches have failed to provide an answer and wondering how others are getting this info. certainly someone must be doing this.
    end goal is to send to syslog server where then my splunk instance ingests the files so I can centralize all my log searches