timestamp of events in reports (was: Re: Lire-Squid Reports)

[Joost van Baal]

Hi Frank,

On Mon, Mar 29, 2004 at 04:35:30PM -0500, Nardis, Frank wrote:
> 
> Have Lire running on Redhat for process Squid proxy logs.
> 
> a) Is there a way to generate a detailed report that includes the time a URL
> was accessed?
> 
> My current setup shows IP address and URL but does not include the time
> stamp - which is the first field in the Squid access.log file (in UNIX time
> format).

Adding a

     <lire:records fields="time"/>

to the report configuration file will likely work.  So: copy the report
you'd like to change from /usr/share/lire/reports/proxy to
~/.lire/reports/proxy/ , and add this line to report .xml specification.

The Lire developers manual has more details on what's possible in Lire
reports.

(I'll likely contribute a firewall report using this trick soonish,
you'll be able to learn from that example.)

Bye,

Joost

-- 
.    .                                        http://logreport.com/
| '.|                        /^LogReport$/
| Lire                                        http://logreport.org/
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: Digital signature
Url : http://lists.logreport.org/pipermail/questions/attachments/20040330/2e8c9034/attachment.bin