GraySquid for Graylog



Download from Github
View on Github
Open Issues

A Graylog squid content pack.

This content pack will launch a SYSLOG_TCP input on port 19302 and will parse your squid logs to be ingested and processed into GrayLog.

The following fields are extracted from the standard squid log.

  • Duration
  • Client_Address
  • Method
  • Result_Code
  • Status_Code
  • URI
  • URI_Protocol (optional)
  • URI_User (optional)
  • URI_Host
  • URI_Port (optional)
  • URI_Path (optional)
  • URI_Fragment (optional)
  • User
  • Peer_Status
  • Peer_Host
  • Content-Type