Navigation

    Netgate Discussion Forum
    • Register
    • Login
    • Search
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search

    Trouble getting sarg reports populated

    pfSense Packages
    2
    3
    1734
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • V
      v-2nas last edited by

      Hi All,

      I have been working on SARG Reports generation issue. I had got some success while troubleshooting the sarg reports however now i am at a point where sarg doesn't seems to be populating the reports.

      I have followed pretty much this article to reconfigure sarg reports except the sarg.conf file
      http://jimiz.net/2012/01/pfsense-sarg-squid-reports-setup/#axzz2Kmer3JXq

      Here are my finding.
      Running pfsense 2.0.2 amd64 freebsd 8.1 release-p13
      sarg package 2.3.2 pkg v.0.6.1

      When I run sarg -x or sarg command from shell it builds the reports


      [2.0.2-RELEASE][root@domain.net]/usr/local/sarg-reports(8): sarg -x
      SARG: Init
      SARG: Loading configuration from /usr/local/etc/sarg/sarg.conf
      SARG: Loading exclude host file from: /usr/local/etc/sarg/exclude_hosts.conf
      SARG: Loading exclude file from: /usr/local/etc/sarg/exclude_users.conf
      SARG: Reading host alias file "/usr/local/etc/sarg/hostalias"
      SARG: List of host names to alias:
      SARG: Parameters:
      SARG:           Hostname or IP address (-a) =
      SARG:                    Useragent log (-b) =
      SARG:                     Exclude file (-c) = /usr/local/etc/sarg/exclude_hosts.
      conf
      SARG:                  Date from-until (-d) =
      SARG:    Email address to send reports (-e) =
      SARG:                      Config file (-f) = /usr/local/etc/sarg/sarg.conf
      SARG:                      Date format (-g) = USA (mm/dd/yyyy)
      SARG:                        IP report (-i) = No
      SARG:                        Input log (-l) = /var/log/squid/access.log
      SARG:               Resolve IP Address (-n) = No
      SARG:                       Output dir (-o) = /usr/local/sarg-reports/
      SARG: Use Ip Address instead of userid (-p) = No
      SARG:                    Accessed sitvare (-s) =
      SARG:                             Time (-t) =
      SARG:                             User (-u) =
      SARG:                    Temporary dir (-w) = /tmp/sarg
      SARG:                   Debug messages (-x) = Yes
      SARG:                 Process messages (-z) = No
      SARG:  Previous reports to keep (–lastlog) = 0
      SARG:
      SARG: sarg version: 2.3.2 Nov-23-2011
      SARG: Reading access log file: /var/log/squid/access.log
      SARG: Records in file: 175917, reading: 100.00%
      SARG:    Records read: 175917, written: 175832, excluded: 0
      SARG: Squid log format
      SARG: Period: 2013 Feb 14-2013 Feb 15
      SARG: pre-sorting files
      SARG: File /usr/local/sarg-reports/2013Feb14-2013Feb15 already exists, moved to
      /usr/local/sarg-reports/2013Feb14-2013Feb15.1


      Kindly check the attached pdf file with screenshots

      Regarding Schedule
      I am not sure if this schedule is really working, because I don't see the updates in the reports or is it meant for realtime?
      I have created a crontab to run once per day, but so I didn't populate the reports as well. I usually run sarg -x and it does work but it reports doesn't show up.

      • 01 * * *   root /usr/local/bin/sarg

      I have emptied /usr/local/sarg-reports directory and cleared local browser cache, run both sarg -x and sarg but no luck new reports doesn't populate.

      i have attached sarg.conf(txt) and screenshots to facilitate any troubleshooting steps.

      Thanks for your time to go through the question and thanks in advance for your help

      regards,
      nav



      sarg.txt

      1 Reply Last reply Reply Quote 0
      • marcelloc
        marcelloc last edited by

        Did you have configured squid and or sarg to rotate logs?

        Treinamentos de Elite: http://sys-squad.com

        Help a community developer! ;D

        1 Reply Last reply Reply Quote 0
        • V
          v-2nas last edited by

          Thanks you for your reply.

          Under Sarg-Reports > Schedule>
          Action after sarg is set to none, no rotation of logs

          Log rotate for Squid is set to 0

          Yesterday i had executed sarg -x twice at different internval however the new reports doesn't pop in.
          For second report .1, there is no index.html file generated
          For third .2, the report doesn't get populated into view report, but it has got index.html.gz

          kindly see the attached screenshot.

          I have disabled the compression now and waiting for the crontab to execute the sarg.

          Thx,
          Nav


          1 Reply Last reply Reply Quote 0
          • First post
            Last post