On Mon, Jan 28, 2013 at 11:20 AM, Otto van der Schaaf <[email protected]> wrote:
> So, you would like to aggregate data on the incoming host header?
Correct.
> If so, you could configure a custom log that captures pristine host
> header instead of the remapped one.
Oh.. right.. I got this working in a separate log file using the following:
<LogFormat>
<Name = "squidtest">
<Format = "%<cqts> %<ttms> %<chi> %<crc>/%<pssc> %<psql> %<cqhm>
%<cquuc> %<caun> %<phr>/%<pqsn> %<psct>"/>
</LogFormat>
<LogObject>
<Format = "squidtest"/>
<Filename = "squid_test"/>
<Protocols = "http, icp"/>
</LogObject>
i.e. using <cquuc> instead of <cquc>.
Would be nice if I could modify this directly in the "squid" log
format, but that didn't seem to work.
-jf
