Squid log format and problems reading epoch time %s?

[Paul Wayper]

Hi all,

I've added a Squid log parser that has patterns for the access log and the general daemon output.

The access log uses epoch time with milliseconds - e.g. 1436673100.317.  I tried the timestamp format pattern "%s.%i", which doesn't complain but gives every log line a date in Jan 1st 1970.  What am I doing wrong?

Thanks in advance,

Paul

[Timothy Stack]

​Currently, lnav will only match time formats that are given in the format config or the defaults.

It doesn't check one and then the other, which is not great...

I would say that the two message patterns should be different formats since the cache log

messages don't have much in common with the request log.  I've sent you a pull request

with that and a few other changes, if you're interested.

 

Thanks in advance,

Pau

​l

thanks,

tim

​

​