RE: [squid-users] script conv httpd log fmt -> squid native

> -----Original Message-----
> From: adam-s@pacbell.net [mailto:adam-s@pacbell.net]
> Sent: Sat, May 17, 2003 2:13p
> To: squid-users@squid-cache.org
> Subject: Re: [squid-users] script conv httpd log fmt -> squid native
>
>
> On Sat, 17 May 2003 13:01:31 -0700, you wrote:
> >I saw an awk script for squid native -> httpd native log format.
> >Does anyone have a similar script off hand to do the opposite?
> >
> >I usually like httpd format logs since _I_ can read the
> >logs directly, whereas, the squid native log format isn't so
> >easily human readable, but I want to run a report generator
> >that only groks squid format (yeah, I know there's a bunch that
> >only grok httpd format as well, but they didn't seem as directly
> >appropriate to what I wanted).
>
> A google groups search for awk+convert came up with two useful hits
> from the mailing list, the post by Peter Smith looks good:
> http://groups.google.com/groups?as_q=awk%20convert&as_ugroup=m
> ailing.unix.squid-users

---
	That's the script I mentioned that converts squid native to
httpd native -- i.e. already found that one, (surprisingly, via
'google'! :-)), thank you.  I want to
do the reverse.  I like being able to 'vi' my logs and browse them
with the date format being readable.
> As to your original assertion about making the logs "easily readable,"
> the only thing cryptic is the UTCseconds timestamp which is easy to
> filter. 
---
	Maybe filterable, but not easily if I'm browsing the logs
with vi/vim/gvim which is what I use about 80% of the time
> The other values are just in a different order.
----
	Order doesn't bother me.  It's usually just date/time that
are important so I can find the data/queries/replies I'm looking
for.
> Lastly, not sure what kind of report generator you are wanting or
> since first you want httpd native format logs but then want a script
> that "only groks squid format" but I find Calamaris, also linked from
> the above squid Scripts url, very useful. 
---
	I'm actually wanting to use Calamaris -- but my scripts are
in httpd_native so I can read date/time.  For each time I need to
use calamaris (this is the first time), I've used vim on the
logs directly to read info (where I need date/time to be readable)
about 50-100 times.  If my normal usage is to read logs with vim,
having date/time be human readable is a great advantage.  While
I could hope that I could reach the advance skill of spock listening
to binary code or mr. traitor in Matrix-1 who could just read
the binary screens directly, I'm not quite at that level (besides,
the reasoning of 
> The line I like to use is
> "cat access.log | calamaris -a -O -c -U M > squidrep.out" as it gives
> all reports (-a), sorts by size (-O), is case insesitive (-c), and
> switches from K to MB, making for cleaner tables.  What I liked about
> Calamaris is it has few dependencies.   I just downloaded it, ran the
> script, put it in cron, and voila I had handy daily reports.
> 
> anyhow do whatever you like - I hope some of the above proves useful,
---
	No...you're just making me drool/unhappy that I can't have
my human readable time/date *and* calamaris reports (vegatarianism
aside).  
	It's really just the date/time format that I'm mostly unhappy
with.
-linda