Sarg Reports Error: Could not find report index file. (Fixed)



  • I have been trying to figure this out for a few weeks now and nothing i try is working.
    Re installed pfSense 2x and still no luck.

    Error: Could not find report index file.
    Check and save sarg settings and try to force sarg schedule.
    

    Diagnostics: Execute command sarg -x

    $ sarg -x
    SARG: Cannot set the locale LC_ALL to the environment variable
    

    2.1-RELEASE (i386)
    built on Wed Sep 11 18:16:22 EDT 2013
    FreeBSD 8.3-RELEASE-p11

    squid          2.7.9 pkg v.4.3.3
    squid3        3.1.20 pkg 2.0.6
    squidGuard 1.4_4 pkg v.1.9.5
    Sarg           2.3.6_2 pkg v.0.6.3

    How i fixed my problem

    i selected all the "Report Options" and all "Report to generate" options and forced update



  • try to debug this way

    export LC_ALL=C && sarg -x



  • ok here is what it put out

    $ export LC_ALL=C && sarg -x
    SARG: Init
    SARG: Loading configuration from /usr/pbi/sarg-i386/etc/sarg/sarg.conf
    SARG: Loading exclude host file from: /usr/pbi/sarg-i386/etc/sarg/exclude_hosts.conf
    SARG: Loading exclude file from: /usr/pbi/sarg-i386/etc/sarg/exclude_users.conf
    SARG: Reading host alias file "/usr/pbi/sarg-i386/etc/sarg/hostalias"
    SARG: List of host names to alias:
    SARG: Deleting temporary directory "/tmp/sarg"
    SARG: Parameters:
    SARG:           Hostname or IP address (-a) = 
    SARG:                    Useragent log (-b) = 
    SARG:                     Exclude file (-c) = /usr/pbi/sarg-i386/etc/sarg/exclude_hosts.conf
    SARG:                  Date from-until (-d) = 
    SARG:    Email address to send reports (-e) = 
    SARG:                      Config file (-f) = /usr/pbi/sarg-i386/etc/sarg/sarg.conf
    SARG:                      Date format (-g) = USA (mm/dd/yyyy)
    SARG:                        IP report (-i) = No
    SARG:             Keep temporary files (-k) = No
    SARG:                        Input log (-l) = /var/squid/log/access.log
    SARG:               Resolve IP Address (-n) = No
    SARG:                       Output dir (-o) = /usr/local/sarg-reports/
    SARG: Use Ip Address instead of userid (-p) = Yes
    SARG:                    Accessed site (-s) = 
    SARG:                             Time (-t) = 
    SARG:                             User (-u) = 
    SARG:                    Temporary dir (-w) = /tmp/sarg
    SARG:                   Debug messages (-x) = Yes
    SARG:                 Process messages (-z) = No
    SARG:  Previous reports to keep (--lastlog) = 0
    SARG: 
    SARG: sarg version: 2.3.6 Arp-21-2013
    SARG: Reading access log file: /var/squid/log/access.log
    SARG: Records in file: 3913, reading: 0.00%
    SARG:    Records read: 3913, written: 3913, excluded: 0
    SARG: Squid log format
    SARG: Period: 2013 Oct 16
    SARG: File /usr/local/sarg-reports/2013/10/16 already exists, moved to /usr/local/sarg-reports/2013/10/16.3
    SARG: cannot open /usr/local/sarg-reports/2013/10/16/sarg-date for writing
    SARG:: No such file or directory
    SARG: Records in file: 3913, reading: 100.00%
    


  • omg i got it to work.
    i selected all the "Report Options" and all "Report to generate" options and forced update :D
    i feel kinda dumb for not trying that sooner.
    thanks for the reply anyway ;)



  • I have the exact same error as you. Unfortunately enabling all options and reports didn't help :(

    Is there any other solution?

    Running pfSense 2.1 and latest Sarg package

    $ export LC_ALL=C && sarg -x
    SARG: Init
    SARG: Loading configuration from /usr/pbi/sarg-amd64/etc/sarg/sarg.conf
    SARG: Chaining IP resolving module "dns"
    SARG: Loading exclude host file from: /usr/pbi/sarg-amd64/etc/sarg/exclude_hosts.conf
    SARG: Loading exclude file from: /usr/pbi/sarg-amd64/etc/sarg/exclude_users.conf
    SARG: Reading host alias file "/usr/pbi/sarg-amd64/etc/sarg/hostalias"
    SARG: List of host names to alias:
    SARG: Deleting temporary directory "/tmp/sarg"
    SARG: Parameters:
    SARG:          Hostname or IP address (-a) =
    SARG:                    Useragent log (-b) =
    SARG:                    Exclude file (-c) = /usr/pbi/sarg-amd64/etc/sarg/exclude_hosts.conf
    SARG:                  Date from-until (-d) =
    SARG:    Email address to send reports (-e) =
    SARG:                      Config file (-f) = /usr/pbi/sarg-amd64/etc/sarg/sarg.conf
    SARG:                      Date format (-g) = Europe (dd/mm/yyyy)
    SARG:                        IP report (-i) = No
    SARG:            Keep temporary files (-k) = No
    SARG:                        Input log (-l) = /var/squid/logs/access.log
    SARG:              Resolve IP Address (-n) = Yes
    SARG:                      Output dir (-o) = /usr/local/sarg-reports/
    SARG: Use Ip Address instead of userid (-p) = Yes
    SARG:                    Accessed site (-s) =
    SARG:                            Time (-t) =
    SARG:                            User (-u) =
    SARG:                    Temporary dir (-w) = /tmp/sarg
    SARG:                  Debug messages (-x) = Yes
    SARG:                Process messages (-z) = No
    SARG:  Previous reports to keep (–lastlog) = 0
    SARG:
    SARG: sarg version: 2.3.6 Arp-21-2013
    SARG: Reading access log file: /var/squid/logs/access.log
    SARG: Records in file: 30, reading: 0.00%
    SARG:    Records read: 30, written: 0, excluded: 0
    SARG: Squid log format
    SARG: No records found
    SARG: End
    SARG: Records in file: 30, reading: 100.00%

    Forget it.. Silly me had not enabled Squid logging… major Derp

    However when I'm checking the logs I see asterisks instead of url/hostnames Is that normal? I disabled the privacy option.



  • Maybe give some time to log more info. The past logs may only have the asterisks saved.



  • Will do. Thanks for the reply.

    Now I need to find a tool that will report WAN usage (broken a bit like Sarg - hostname -> destination -> bandwidth used, frequency)
    I got darkstat but it's a bit limited and does not show where users are going



  • I use bandwidthd just for bandwidth usage and Squid User Access Report to see detailed info.
    If you find some thing better let me know :)



  • Sure I'll PM you.



  • $ export LC_ALL=C && sarg -x
    SARG: Init
    SARG: Loading configuration from /usr/local/etc/sarg/sarg.conf
    SARG: Loading exclude host file from: /usr/pbi/sarg-i386/etc/sarg/exclude_hosts.conf
    SARG: Loading exclude file from: /usr/pbi/sarg-i386/etc/sarg/exclude_users.conf
    SARG: Reading host alias file "/usr/pbi/sarg-i386/etc/sarg/hostalias"
    SARG: List of host names to alias:
    SARG: Parameters:
    SARG:          Hostname or IP address (-a) =
    SARG:                    Useragent log (-b) =
    SARG:                    Exclude file (-c) = /usr/pbi/sarg-i386/etc/sarg/exclude_hosts.conf
    SARG:                  Date from-until (-d) =
    SARG:    Email address to send reports (-e) =
    SARG:                      Config file (-f) = /usr/local/etc/sarg/sarg.conf
    SARG:                      Date format (-g) = USA (mm/dd/yyyy)
    SARG:                        IP report (-i) = No
    SARG:            Keep temporary files (-k) = No
    SARG:                        Input log (-l) = /var/squid/logs/access.log
    SARG:              Resolve IP Address (-n) = No
    SARG:                      Output dir (-o) = /usr/local/sarg-reports/
    SARG: Use Ip Address instead of userid (-p) = No
    SARG:                    Accessed site (-s) =
    SARG:                            Time (-t) =
    SARG:                            User (-u) =
    SARG:                    Temporary dir (-w) = /tmp/sarg
    SARG:                  Debug messages (-x) = Yes
    SARG:                Process messages (-z) = No
    SARG:  Previous reports to keep (–lastlog) = 0
    SARG:
    SARG: sarg version: 2.3.9 Sep-21-2014
    SARG: Reading access log file: /var/squid/logs/access.log
    SARG: Records in file: 92564, reading: 0.00%
    SARG: Records in file: 5000, reading: 5.40%
    SARG: Records in file: 10000, reading: 10.80%
    SARG: Records in file: 15000, reading: 16.21%
    SARG: Records in file: 20000, reading: 21.61%
    SARG: Records in file: 25000, reading: 27.01%
    SARG: Records in file: 30000, reading: 32.41%
    SARG: Records in file: 35000, reading: 37.81%
    SARG: Records in file: 40000, reading: 43.21%
    SARG: Records in file: 45000, reading: 48.62%
    SARG: Records in file: 50000, reading: 54.02%
    SARG: Records in file: 55000, reading: 59.42%
    SARG: Records in file: 60000, reading: 64.82%
    SARG: Records in file: 65000, reading: 70.22%
    SARG: Records in file: 70000, reading: 75.62%
    SARG: Records in file: 75000, reading: 81.03%
    SARG: Records in file: 80000, reading: 86.43%
    SARG: Records in file: 85000, reading: 91.83%
    SARG: Records in file: 90000, reading: 97.23%
    SARG:    Records read: 92563, written: 92563, excluded: 0
    SARG: Squid log format
    SARG: Period: 2015 Jul 10-2015 Jul 16
    SARG: Sorting log /tmp/sarg/192_168_2_68.user_unsort
    SARG: Sorting log /tmp/sarg/192_168_2_146.user_unsort
    SARG: Sorting log /tmp/sarg/192_168_2_88.user_unsort
    SARG: Sorting log /tmp/sarg/192_168_2_12.user_unsort
    SARG: Sorting log /tmp/sarg/192_168_2_92.user_unsort
    SARG: Sorting log /tmp/sarg/192_168_2_116.user_unsort
    SARG: Sorting log /tmp/sarg/192_168_2_65.user_unsort
    SARG: Sorting log /tmp/sarg/192_168_2_115.user_unsort
    SARG: Sorting log /tmp/sarg/192_168_2_79.user_unsort
    SARG: Sorting log /tmp/sarg/192_168_2_178.user_unsort
    SARG: Sorting log /tmp/sarg/192_168_2_177.user_unsort
    SARG: Sorting log /tmp/sarg/192_168_2_5.user_unsort
    SARG: Sorting log /tmp/sarg/192_168_2_73.user_unsort
    SARG: Sorting log /tmp/sarg/192_168_2_152.user_unsort
    SARG: Sorting log /tmp/sarg/192_168_2_147.user_unsort
    SARG: Sorting log /tmp/sarg/192_168_2_176.user_unsort
    SARG: Sorting log /tmp/sarg/192_168_2_25.user_unsort
    SARG: Sorting log /tmp/sarg/192_168_2_148.user_unsort
    SARG: Sorting log /tmp/sarg/192_168_2_105.user_unsort
    SARG: Sorting log /tmp/sarg/192_168_2_124.user_unsort
    SARG: Sorting log /tmp/sarg/192_168_2_173.user_unsort
    SARG: Sorting log /tmp/sarg/192_168_2_102.user_unsort
    SARG: Sorting log /tmp/sarg/192_168_2_111.user_unsort
    SARG: Sorting log /tmp/sarg/192_168_2_122.user_unsort
    SARG: Sorting log /tmp/sarg/192_168_2_109.user_unsort
    SARG: Sorting log /tmp/sarg/192_168_2_49.user_unsort
    SARG: Sorting log /tmp/sarg/192_168_2_10.user_unsort
    SARG: Sorting log /tmp/sarg/192_168_2_123.user_unsort
    SARG: Sorting log /tmp/sarg/192_168_2_63.user_unsort
    SARG: Making index.html
    SARG: Successful report generated on /usr/local/sarg-reports/2015/07/10-16
    SARG: Purging temporary file sarg-general
    SARG: End
    SARG: Records in file: 92564, reading: 100.00%


Log in to reply