[squid-users] Squid4 '%<la' empty sometimes

[Peter Viskup]

On Linux Virtual Server balanced cluster the %<la is empty when Squid
errors ERR_ACCESS_DENIED or TCP_MEM_HIT are logged.

This is causing issue when processing logs on remote machine (e.g.
ELK). The "proxy node" cannot be differentiated.

This string used in logformat to differentiate Squid instance and LVS node:
proxyPort=%lp proxyIP=%la proxyNode=%<la

Example:
for ERR_ACCESS_DENIED and TCP_MEM_HIT entries:
proxyPort=3128 proxyIP=10.x.y.z proxyNode=-

for ERR_DIR_LISTING entry:
proxyPort=3128 proxyIP=10.x.y.z proxyNode=10.x.y.a

How to differentiate the nodes in such cases?
Should the bug being considered?

Peter