Re: [squid-users] oot: about sarg

░▒▓ ɹɐzǝupɐɥʞ ɐzɹıɯ ▓▒░ wrote:
> i use crontab
> */30 * * * * /usr/bin/sarg -f /etc/squid/sarg.conf
>
> but the sarg always display 2 lines
> 16Jan2009-16Jan2009 Fri Jan 16 07:30:01 EST 2009 7 82.28M 11.75M
> 15Jan2009-16Jan2009 Fri Jan 16 06:30:12 EST 2009 98 3.44G 35.13M
> 15Jan2009-15Jan2009 Fri Jan 16 00:00:12 EST 2009 98 3.44G 35.12M
>

This looks like you have three SARG processes running. One started at
midnight, one at 06:30 and one at 07:30.

1) How large is your access.log?
2) How often do you rotate it?

You are not specifying that SARG only process data for the current day,
so it's working on the whole data set every time it runs.

> how to fix it ?
> the point 15Jan2009-16Jan2009 is similar with 15Jan2009-15Jan2009
>
> i want to set my report
> everyday with update every 30 min...
>

I run SARG on an hourly basis at a lot of my client's sites, so I tell
it to only process the current day's reports, with a script in
/etc/cron.hourly that looks like...

#!/bin/bash

#Get current date
TODAY=$(date +%d/%m/%Y)
/usr/bin/sarg -d $TODAY-$TODAY
exit $?

# End Script

Chris
Received on Fri Jan 16 2009 - 20:49:00 MST