Log analyzers: Squint Configuration and Tuning

Squint Configuration and Tuning (tested 100% works)

Question:
1. how to install squint?
2. how to restart squint?
3. how to set schedule timer for update at squint?
4. how can we create user for squint?

Solution:
1. Squint Installation:
root@proxy:~# wget www.ledge.co.za/software/squint/squint-0.3.8.tar.gz
[root@mail ~]# tar -zxvf squint-0.3.8.tar.gz
squint-0.3.8/
squint-0.3.8/Makefile
squint-0.3.8/COPYING
squint-0.3.8/Changelog
squint-0.3.8/TODO
squint-0.3.8/fakenames
squint-0.3.8/INSTALL
squint-0.3.8/userlist
squint-0.3.8/squint.cron.sh
squint-0.3.8/squint.pl

root@proxy:~# cd /root/squint-0.3.8
root@proxy:~# cp squint.pl squint.cron.sh /usr/local/bin
root@proxy:~# squint.cron.sh init
root@proxy:~# squint.cron.sh all

2. Restart Squint:
root@proxy:~# squint.cron.sh all

3. Set the update schedule everyday at 1:30 PM from corn.d file like this way,
root@proxy:~# vim /etc/crontab
# m h dom mon dow user  command
# squint squid reports
# Weekly, on Mondays
00 01 * * *  root /usr/local/bin/squint.cron.sh weekly

# Monthly, on the first day of the month
00 02 1 * *    root /usr/local/bin/squint.cron.sh monthly

# Daily at 3am
57 12 * * *    root /usr/local/bin/squint.cron.sh daily

###squint###
#45 12 * * 7     root  /usr/local/bin/squint.cron.sh all

root@proxy:~# cd /usr/local/bin/
root@proxy:/usr/local/bin# chmod 777 squint.cron.sh
root@proxy:/usr/local/bin# chown root:root squint.cron.sh
root@proxy:~# /etc/init.d/cron restart

4. Create user for squint:
Just install the web server authentication.

5. Setup squint – to convert a squid log into a browsable HTML report:
Download actual version of squint and extract it:
    ~# wget http://www.ledge.co.za/software/squint/squint.tar.gz
    ~ tar xvf squint.tar.gz
    rm squint.tar.gz
    cd squint-0.3.18/
   
Mofidy BASEDIR, LOGDIR and HTTPDCONF in squint.cron.sh:
    ~# vi squint.cron.sh
    BASEDIR=”/var/www/localhost/htdocs/squint”
    LOGDIR=”/var/log/squid”
    HTTPDCONF=/etc/apache2/httpd.conf
   
Install squint:
    ~# make install

Create a place for the reports in /var/www/localhost/htdocs/squint and install a crontab entry to run the report daily, weekly and monthly:
    ~# make init

Verify if it is installed correctly:
    ~# ls -ald /var/www/localhost/htdocs/squint
    ~# less /etc/crontab
    ~# cd ..
    ~# rm -r squint*
Point your web-browser to http://proxyhost/squint to see the reports.