Hi Avraham, I think it wouldnt be a good idea to just create a symlink because squid (or the user under which squid runs) then must have access to the syslog, and if your squid instance get compromised the the syslog is open to read for these one. Best Regards Sebastian