Re: [squid-users] Display Company Policy

From: <[email protected]>
Date: Thu, 6 Mar 2003 12:51:12 +0100

Hi Ben,

I'm currently also have such requests from my Boss. I currently use Sarg and
Webaliser to create the stats I need. But to easy things up and create more
personalized stats I put the access.log into a PostgreSQL database and
retreiver information based on a query back into a temporary access.log table
which is parsable by sarg and/or webalizer (or any other program that read's a
squid 2 access.log).

For example I don't want to see what people do in coffe breaks between 12:15
and 13:00, today. SO I just do this:

~whale-retreiver -o /tmp/tmp.log -f "(DATE = TODAY) AND NOT (TIME
BETWEEN '12:15' AND '13:00')"

Now I do ~sarg -l /tmp/tmp.log to create a sarg access log that display's
everything exept between 12:15 and 13:00.

I can create all kinds of variations on this. Every group here has it's own
name like direction, administration, enginering and computer names are named
like this scheme: ENG001.int.domain.nl, eng.002.int.domain.nl,
amd001.int.domain.nl I think you get the idea.

If I want to know how the enginering department peroforms between 8:00 and 9:55
in the morning I do this:

~whale-retreiver -o /tmp/tmp.log -f "(DATE = TODAY) AND (DOMAIN
LIKE 'eng%.int.domain.nl') AND NOT (TIME BETWEEN '8:00' AND '9:55')"

No Sarg can pars it again and create the appropriate stats!

In you case, to get the first record of a single user on this date (today) you
can do this:

~whale-retreiver -o /tmp/tmp.log -f "(DATE = TODAY) AND (DOMAIN
LIKE 'eng%.int.domain.nl')"

Or from yesterday..
~whale-retreiver -o /tmp/tmp.log -f "(DATE = YESTERDAY) AND (DOMAIN
LIKE 'eng%.int.domain.nl')"

The output can be parser by a simple perl script and create the stats.

The program is still in beta but thinks work right at least in my place :)

Ries
Received on Thu Mar 06 2003 - 04:53:50 MST

This archive was generated by hypermail pre-2.1.9 : Tue Dec 09 2003 - 17:13:57 MST