[squid-users] Squid doesn't write logs via rsyslog

[Amos Jeffries]

On 8/06/2015 11:02 p.m., Antony Stone wrote:
> On Monday 08 June 2015 at 12:53:00 (EU time), Robert Lasota wrote:
> 
>> the problem is it still writes logs to files /var/log/access.log or
>> /opt/var/log/access.log (depends what I set in conf) but never to rsyslog.
>>
>> I mean, I have set rsyslog to it send logs to remote central server, and
>> from other apps like sshd or named its working and rsyslog send them , but
>> Squid still not care that and writes locally to files.
>>
>> I set different combinations in squid.conf but nothing, even:
>> access_log syslog squid
>> cache_log syslog squid.
>> ..also nothing
> 
> You appear to be missing the facility and priority settings (ie: telling 
> syslogd how to handle the messages).
> 
> See http://www.squid-cache.org/Doc/config/access_log/
> 
> Try something such as:
> 
> access_log syslog:daemon.info


Also, cache.log is the unified stderr output of all Squid sub-processes
(workers, diskers, helpers etc). It cannot use syslog at this time.

You can possibly make cache.log file point at a unix socket device that
pipes somewhere like syslog though.

Amos