[squid-users] Squid4 '%<la' empty sometimes

Peter Viskup skupko.sk at gmail.com
Wed Apr 4 09:15:12 UTC 2018


On Linux Virtual Server balanced cluster the %<la is empty when Squid
errors ERR_ACCESS_DENIED or TCP_MEM_HIT are logged.

This is causing issue when processing logs on remote machine (e.g.
ELK). The "proxy node" cannot be differentiated.

This string used in logformat to differentiate Squid instance and LVS node:
proxyPort=%lp proxyIP=%la proxyNode=%<la

Example:
for ERR_ACCESS_DENIED and TCP_MEM_HIT entries:
proxyPort=3128 proxyIP=10.x.y.z proxyNode=-

for ERR_DIR_LISTING entry:
proxyPort=3128 proxyIP=10.x.y.z proxyNode=10.x.y.a

How to differentiate the nodes in such cases?
Should the bug being considered?

Peter


More information about the squid-users mailing list