Monitoring proxy server squid pfsense 2.0.1 ? how to

miles267

linuxmaniac,

What options did you selected on sarg config page? did you created the schedules to run sarg?

I have reports working with these report options selected:

user graphics
remove temporary files
generate the main index
generate the index tree
overwrite report
use comma instead pint in reports
show de downloaded volume ond date/time reports

and all report to generate selected

Hi - I've followed this approach it seems to work. However, I seem to get "gaps" in the report. If I attempt to click on any of the day hyperlinks under the FILE/PERIOD column where there are '0' values under USERS, BYTES or AVERAGE, Sarg immediately returns:

Error: Could not find report index file.
Check and save sarg settings and try to force sarg schedule.

My schedule is set as follows (no Additional Args defined)

Status Update Frequency Aditional Args Post Action Description
on 1d both Rotate Logs Restart Daemon
on 1h none No Rotate No Restart

FILE/PERIOD CREATION DATE USERS BYTES AVERAGE
2012Jun17-2012Jun26 Tue Jun 26 11:00:09 2012 12 3,776,071,500 314,672,625
2012Jun17-2012Jun25 Tue Jun 26 00:00:11 2012 0 0 0
2012Jun17-2012Jun24 Mon Jun 25 00:00:10 2012 0 0 0
2012Jun17-2012Jun23 Sun Jun 24 00:00:08 2012 0 0 0
2012Jun17-2012Jun22 Fri Jun 22 23:00:07 2012 12 2,368,777,123 197,398,093
2012Jun17-2012Jun21 Fri Jun 22 00:00:06 2012 0 0 0
2012Jun17-2012Jun20 Thu Jun 21 00:00:18 2012 12 1,685,088,876 140,424,073
2012Jun17-2012Jun19 Wed Jun 20 00:00:04 2012 12 1,423,723,046 118,643,587

marcelloc

@miles267:

FILE/PERIOD CREATION DATE USERS BYTES AVERAGE
2012Jun17-2012Jun26 Tue Jun 26 11:00:09 2012 12 3,776,071,500 314,672,625
2012Jun17-2012Jun25 Tue Jun 26 00:00:11 2012 0 0 0
2012Jun17-2012Jun24 Mon Jun 25 00:00:10 2012 0 0 0
2012Jun17-2012Jun23 Sun Jun 24 00:00:08 2012 0 0 0
2012Jun17-2012Jun22 Fri Jun 22 23:00:07 2012 12 2,368,777,123 197,398,093
2012Jun17-2012Jun21 Fri Jun 22 00:00:06 2012 0 0 0
2012Jun17-2012Jun20 Thu Jun 21 00:00:18 2012 12 1,685,088,876 140,424,073
2012Jun17-2012Jun19 Wed Jun 20 00:00:04 2012 12 1,423,723,046 118,643,587

it looks like your logs are not rotating

try to use sarg args to limit report to one day and check the results.

-d date +%d/%m/%Y-date +%d/%m/%Y

miles267

marcelloc, it appears to have worked. I actually modified my 1d Sarg schedule to include the arguement exactly as you've written it (and FORCED UPDATE NOW)

Status Update Frequency Aditional Args Post Action Description
on 1d -d date +%d/%m/%Y-date +%d/%m/%Y both Rotate Logs Restart Daemon

After the update, the report output appears as follows. The first line being the result of my forced update.

FILE/PERIOD CREATION DATE USERS BYTES AVERAGE
2012Jun26-2012Jun26 Tue Jun 26 12:20:21 2012 8 66,752,110 8,344,013
2012Jun17-2012Jun26 Tue Jun 26 12:00:09 2012 12 3,816,299,190 318,024,932
2012Jun17-2012Jun25 Tue Jun 26 00:00:11 2012 0 0 0
2012Jun17-2012Jun24 Mon Jun 25 00:00:10 2012 0 0 0
2012Jun17-2012Jun23 Sun Jun 24 00:00:08 2012 0 0 0
2012Jun17-2012Jun22 Fri Jun 22 23:00:07 2012 12 2,368,777,123 197,398,093
2012Jun17-2012Jun21 Fri Jun 22 00:00:06 2012 0 0 0
2012Jun17-2012Jun20 Thu Jun 21 00:00:18 2012 12 1,685,088,876 140,424,073
2012Jun17-2012Jun19 Wed Jun 20 00:00:04 2012 12 1,423,723,046 118,643,587

Once it works, is there any way to clear out all of the old log data?

bmironb

i'm also wondering if i could delete old reports….is that possible ? without causing malfunctions

marcelloc

@bmironb:

i'm also wondering if i could delete old reports….is that possible ? without causing malfunctions

sure, just delete report folder in /usr/local/sarg-reports

jmirsteinban

Error: Could not find report index file.
Check sarg settings and try to force sarg schedule.

SOLUCION!!!!

En la Pestaña Schedule una tarea con la Siguiente configuracion:

Descripcion : Nombre que ustedes decidan
Sarg arg: -d date +%d/%m/%Y-date +%d/%m/%Y
Frecuency: 15m

Luego lo guardan y se van a la pestaña general
Seleccionan:

user graphics
remove temporary files
generate the main index
generate the index tree
overwrite report
use comma instead pint in reports
show de downloaded volume ond date/time reports

En la sección REPORT TO GENERATE se seleccionan todos

Se guarda la configuracion y vamos de nuevo a la pestaña de schedule abrimos la tarea y damos en el boton

FORCE UPDATE NOW

Esperamos a que ejecute la tarea y por ultumo vamos al la pestaña donde vemos el reporte!!!!