[squid-users] squid logging disable based on ACL & kernel: Out of memory

[Alex Rousskov]

On 5/1/20 12:43 PM, Akshay Hegde wrote:

> I have below option globally, which I don't want to make "off"
> strip_query_terms on

> acl track dstdomain "/etc/squid/sites_track.txt"
> access_log /var/log/squid/full_site_links.log squid_custom track

> however for specific ACL I would like to log full URL with query
> parameters, how this can be done ?

I have not tested this, and the results may be version-dependent, but
according to logformat documentation[1], %ru honors strip_query_terms
while %>ru does not:

    logformat strippedFormat %ts... %ru ...
    access_log ... strippedFormat track !specific_ACL

    logformat detailedFormat %ts... %>ru ...
    access_log ... detailedFormat track specific_ACL

[1] http://www.squid-cache.org/Doc/config/logformat/


HTH,

Alex.

> On Fri, May 1, 2020 at 7:05 PM Alex Rousskov wrote:
> 
>     On 5/1/20 1:20 AM, Akshay Hegde wrote:
> 
>     > *1. How to disable logging of few ACLs ?
> 
>     Use "access_log none aclX" to prevent creation of access.log records for
>     transactions matching aclX. See
>     http://lists.squid-cache.org/pipermail/squid-users/2020-April/021876.html
>     for
>     some related caveats.
> 
> 
>     > *2. Kernel Out of Memory
> 
>     This problem is most likely unrelated to logging. If your Squid is
>     gradually leaking memory (rather than just being overwhelmed with
>     traffic), then the first step towards removing those memory leaks would
>     be to upgrade your Squid from the unsupported and buggy v3.1.10.
> 
> 
>     HTH,
> 
>     Alex.
> 
> 
> 
> -- 
> <https://about.me/akshay.k.hegde?promo=email_sig&utm_source=product&utm_medium=email_sig&utm_campaign=edit_panel&utm_content=thumb>
> 	
> Akshay Hegde
> about.me/akshay.k.hegde
> <https://about.me/akshay.k.hegde?promo=email_sig&utm_source=product&utm_medium=email_sig&utm_campaign=edit_panel&utm_content=thumb>
> 
>