Menu

#47 Exclude codes in Reporting

v1.0_(example)
open
nobody
None
5
2020-11-11
2020-11-11
No

Hello there,
I am trying to exclude the following logs in the SARG reporting. Sample access logs , sarg configuration path and exclude_hosts details are mentioned below.
For some reason, despite having a configuration in sarg.conf this does not seems to be working. any idea as what am i missing ?

Sarg Configuration
Reference in sarg.conf
exclude_codes /etc/sarg/exclude_codes

exclude_codes details
NONE/400
NONE/411
TCP_DENIED/407
TCP_DENIED/403
TCP_DENIED/400
TCP_DENIED/401
TCP_DENIED/411
TCP_MEM_HIT/200
TCP_MEM_HIT/302
TCP_REFRESH_HIT/200
TCP_REFRESH_HIT/304
TCP_NEGATIVE_HIT/404
TCP_IMS_HIT/304
TCP_IMS_HIT/200
TCP_HIT/200
TCP_HIT/302
TCP_MISS/200
TCP_MISS/503

Access Log Sample to be excluded
1605094541.375 274 192.168.0.61 TCP_MISS/200 335 GET http://detectportal.firefox.com/success.txt - HIER_DIRECT/34.107.221.82 text/plain
1605094541.477 5 192.168.0.61 TCP_MISS/200 335 GET http://detectportal.firefox.com/success.txt? - HIER_DIRECT/34.107.221.82 text/plain
1605094541.480 7 192.168.0.61 TCP_MISS/200 335 GET http://detectportal.firefox.com/success.txt? - HIER_DIRECT/34.107.221.82 text/plain
1605094542.380 3123 192.168.0.61 TCP_MISS/200 918 POST http://ocsp.digicert.com/ - HIER_DIRECT/117.18.237.29 application/ocsp-response
1605094542.381 3431 192.168.0.61 TCP_MISS/200 918 POST http://ocsp.digicert.com/ - HIER_DIRECT/117.18.237.29 application/ocsp-response
1605094542.381 2408 192.168.0.61 TCP_MISS/200 918 POST http://ocsp.digicert.com/ - HIER_DIRECT/117.18.237.29 application/ocsp-response
1605094542.381 4142 192.168.0.61 TCP_MISS/200 919 POST http://ocsp.digicert.com/ - HIER_DIRECT/117.18.237.29 application/ocsp-response
1605094542.381 909 192.168.0.61 TCP_MISS/200 919 POST http://ocsp.digicert.com/ - HIER_DIRECT/117.18.237.29 application/ocsp-response
1605094542.381 4455 192.168.0.61 TCP_MISS/200 919 POST http://ocsp.digicert.com/ - HIER_DIRECT/117.18.237.29 application/ocsp-response
1605094542.381 2715 192.168.0.61 TCP_MISS/200 918 POST http://ocsp.digicert.com/ - HIER_DIRECT/117.18.237.29 application/ocsp-response
1605094542.381 823 192.168.0.61 TCP_MISS/200 727 POST http://ocsp.digicert.com/ - HIER_DIRECT/117.18.237.29 application/ocsp-response
1605094542.381 5068 192.168.0.61 TCP_MISS/200 919 POST http://ocsp.digicert.com/ - HIER_DIRECT/117.18.237.29 application/ocsp-response
1605094542.743 9 192.168.0.61 TCP_MI

1 Attachments

Discussion


Log in to post a comment.

MongoDB Logo MongoDB