Log analyzers: Squint Configuration and Tuning

Question:
1. how to install squint?
2. how to restart squint?
3. how to set schedule timer for update at squint?
4. how can we create user for squint?


Solution:

1. Squint Installation:
root@proxy:~# wget www.ledge.co.za/software/squint/squint-0.3.8.tar.gz

[root@mail ~]# tar -zxvf squint-0.3.8.tar.gz

squint-0.3.8/
squint-0.3.8/Makefile
squint-0.3.8/COPYING
squint-0.3.8/Changelog
squint-0.3.8/TODO
squint-0.3.8/fakenames
squint-0.3.8/INSTALL
squint-0.3.8/userlist
squint-0.3.8/squint.cron.sh
squint-0.3.8/squint.pl

root@proxy:~# cd /root/squint-0.3.8

root@proxy:~# cp squint.pl squint.cron.sh /usr/local/bin

root@proxy:~# squint.cron.sh init

root@proxy:~# squint.cron.sh all



2. Restart Squint:
root@proxy:~# squint.cron.sh all

3. Set the update schedule everyday at 1:30 PM from corn.d file like this way,
root@proxy:~# vim /etc/crontab

# m h dom mon dow user  command
# squint squid reports
# Weekly, on Mondays
00 01 * * *  root /usr/local/bin/squint.cron.sh weekly

# Monthly, on the first day of the month
00 02 1 * *    root /usr/local/bin/squint.cron.sh monthly

# Daily at 3am
57 12 * * *    root /usr/local/bin/squint.cron.sh daily

###squint###
#45 12 * * 7     root  /usr/local/bin/squint.cron.sh all

root@proxy:~# cd /usr/local/bin/

root@proxy:/usr/local/bin# chmod 777 squint.cron.sh

root@proxy:/usr/local/bin# chown root:root squint.cron.sh

root@proxy:~# /etc/init.d/cron restart



4. Create user for squint:
Just install the web server authentication.


5. Setup squint – to convert a squid log into a browsable HTML report:

Download actual version of squint and extract it:
 

 ~# wget http://www.ledge.co.za/software/squint/squint.tar.gz
   

 ~ tar xvf squint.tar.gz
   

 rm squint.tar.gz
   

 cd squint-0.3.18/
 
Mofidy BASEDIR, LOGDIR and HTTPDCONF in squint.cron.sh:
    ~# vi squint.cron.sh
   

BASEDIR=”/var/www/localhost/htdocs/squint”
LOGDIR=”/var/log/squid”
HTTPDCONF=/etc/apache2/httpd.conf