Trouble getting sarg reports populated

[v-2nas]

Hi All,

I have been working on SARG Reports generation issue. I had got some success while troubleshooting the sarg reports however now i am at a point where sarg doesn't seems to be populating the reports.

I have followed pretty much this article to reconfigure sarg reports except the sarg.conf file
http://jimiz.net/2012/01/pfsense-sarg-squid-reports-setup/#axzz2Kmer3JXq

Here are my finding.
Running pfsense 2.0.2 amd64 freebsd 8.1 release-p13
sarg package 2.3.2 pkg v.0.6.1

When I run sarg -x or sarg command from shell it builds the reports

---

[2.0.2-RELEASE][root@domain.net]/usr/local/sarg-reports(8): sarg -x
SARG: Init
SARG: Loading configuration from /usr/local/etc/sarg/sarg.conf
SARG: Loading exclude host file from: /usr/local/etc/sarg/exclude_hosts.conf
SARG: Loading exclude file from: /usr/local/etc/sarg/exclude_users.conf
SARG: Reading host alias file "/usr/local/etc/sarg/hostalias"
SARG: List of host names to alias:
SARG: Parameters:
SARG:           Hostname or IP address (-a) =
SARG:                    Useragent log (-b) =
SARG:                     Exclude file (-c) = /usr/local/etc/sarg/exclude_hosts.
conf
SARG:                  Date from-until (-d) =
SARG:    Email address to send reports (-e) =
SARG:                      Config file (-f) = /usr/local/etc/sarg/sarg.conf
SARG:                      Date format (-g) = USA (mm/dd/yyyy)
SARG:                        IP report (-i) = No
SARG:                        Input log (-l) = /var/log/squid/access.log
SARG:               Resolve IP Address (-n) = No
SARG:                       Output dir (-o) = /usr/local/sarg-reports/
SARG: Use Ip Address instead of userid (-p) = No
SARG:                    Accessed sitvare (-s) =
SARG:                             Time (-t) =
SARG:                             User (-u) =
SARG:                    Temporary dir (-w) = /tmp/sarg
SARG:                   Debug messages (-x) = Yes
SARG:                 Process messages (-z) = No
SARG:  Previous reports to keep (–lastlog) = 0
SARG:
SARG: sarg version: 2.3.2 Nov-23-2011
SARG: Reading access log file: /var/log/squid/access.log
SARG: Records in file: 175917, reading: 100.00%
SARG:    Records read: 175917, written: 175832, excluded: 0
SARG: Squid log format
SARG: Period: 2013 Feb 14-2013 Feb 15
SARG: pre-sorting files
SARG: File /usr/local/sarg-reports/2013Feb14-2013Feb15 already exists, moved to
/usr/local/sarg-reports/2013Feb14-2013Feb15.1

---

Kindly check the attached pdf file with screenshots

Regarding Schedule
I am not sure if this schedule is really working, because I don't see the updates in the reports or is it meant for realtime?
I have created a crontab to run once per day, but so I didn't populate the reports as well. I usually run sarg -x and it does work but it reports doesn't show up.

• 01 * * *   root /usr/local/bin/sarg

I have emptied /usr/local/sarg-reports directory and cleared local browser cache, run both sarg -x and sarg but no luck new reports doesn't populate.

i have attached sarg.conf(txt) and screenshots to facilitate any troubleshooting steps.

Thanks for your time to go through the question and thanks in advance for your help

regards,
nav

sarg.txt

[marcelloc]

Did you have configured squid and or sarg to rotate logs?

[v-2nas]

Thanks you for your reply.

Under Sarg-Reports > Schedule>
Action after sarg is set to none, no rotation of logs

Log rotate for Squid is set to 0

Yesterday i had executed sarg -x twice at different internval however the new reports doesn't pop in.
For second report .1, there is no index.html file generated
For third .2, the report doesn't get populated into view report, but it has got index.html.gz

kindly see the attached screenshot.

I have disabled the compression now and waiting for the crontab to execute the sarg.

Thx,
Nav