Hi! I have a problem. How can I send logs specifically to a proxy from ipfire to another server of mine that is designed to store and view logs. Does anyone know how to implement sending specific logs to a proxy?
See Remote logging
It didnt help me, Do you have more options ?
Which logs do want to send?
@pscar13 's suggestion is for remote logging of the systems logs, held in /var/ipfire/messages and accessible through WUI’s ‘Logs–>System Logs’ entry.
I need only proxy logs. Do you have idea ?
How did it not help? Can you be more specific? Did you put your remote server’s IP into the page? Set protocol? Enable remote logging? What happened that you would consider it not working?
1 Like
there are mostly system logs, firewall logs. There are proxy logs, but there are incredibly few of them.
With ‘proxy logs’ you mean logs of the HTTP(S) proxy Squid, am I right?
These are stored in /var/log/squid/*.log, if enabled in the Proxy WUI page.
Squid hasn’t the functionality of remote logging, as far as I know.
I don’t know if it can be used in ipfire:
1 Like
Apache does not (normally) use syslog so can’t send logs to remote servers, but you may want to have a look at IBM Documentation or https://serverfault.com/questions/1025281/can-we-configure-apache-to-send-logs-directly-to-a-log-analysis-system for a couple of different approaches.
1 Like
The directives have to been put into /var/ipfire/proxy/advanced/acls/include.acl, because squid.conf is written by IPFire.
1 Like