Início / unix / Perguntas / 451754
Accepted
Pratik Mayekar
Asked: 2018-06-26 04:26:18 +0800 CST

Lendo logs com a palavra 'ERROR' entre 2 datas

  • 772

Os logs estão no formato:

2018-06-25 00:00:20,073 DEBUG SAMPLE TEXT CONTENT
2018-06-26 00:00:20,073 ERROR SAMPLE TEXT CONTENT
2018-06-26 17:37:20,073 ERROR SAMPLE TEXT CONTENT
2018-06-26 19:00:20,073 DEBUG SAMPLE TEXT CONTENT
2018-06-27 00:00:20,073 DEBUG SAMPLE TEXT CONTENT
2018-06-28 00:00:20,073 ERROR SAMPLE TEXT CONTENT
2018-06-29 00:00:20,073 ERROR SAMPLE TEXT CONTENT
2018-06-30 00:00:20,073 DEBUG SAMPLE TEXT CONTENT
2018-07-01 11:00:20,073 ERROR SAMPLE TEXT CONTENT
2018-07-02 02:00:20,073 DEBUG SAMPLE TEXT CONTENT
2018-07-02 00:00:20,073 ERROR SAMPLE TEXT CONTENT
2018-07-03 20:00:20,073 ERROR SAMPLE TEXT CONTENT

Quero encontrar e exibir todos os logs entre 2 datas (suponha 2018-06-26 a 2018-07-02) que contenham a palavra ERROR. Vou pegar as datas dinamicamente para que sejam variáveis ​​$FROM e $TO.

Qualquer grep, awkou sedimplementação fará

EDIT: As datas $ TO e $ FROM devem ser inclusivas e podem precisar acessar vários arquivos de log para que os logs não sejam classificados

awk sed

4 respostas

  1. Best Answer

    awk, usando -va opção para passar variáveis ​​do shell para variáveis ​​awk:

    $ awk -v from="$FROM" -v to="$TO" 'from <= $1 && $1 <= to && /ERROR/' log.txt
2018-06-26 00:00:20,073 ERROR SAMPLE TEXT CONTENT
2018-06-26 17:37:20,073 ERROR SAMPLE TEXT CONTENT
2018-06-28 00:00:20,073 ERROR SAMPLE TEXT CONTENT
2018-06-29 00:00:20,073 ERROR SAMPLE TEXT CONTENT
2018-07-01 11:00:20,073 ERROR SAMPLE TEXT CONTENT
2018-07-02 00:00:20,073 ERROR SAMPLE TEXT CONTENT
    • 3

  2. Usando AWK:

    awk '/'$FROM'/,/'$TO'/ {print $0}' log.txt | grep ERROR

    Usando sed:

    sed -n '/'$FROM'/,/'$TO'/p' log.txt | grep ERROR
    • 1

  3. Simples mas eficaz;

    egrep '2018-06-26|2018-07-02' log file | grep "ERROR"

    • 1

  4. Faça um loop nas datas ( via ):

    FROM=2018-06-26
TO=2018-07-02
d=$FROM
while [ $d != $TO ]; do 
  grep "^${d}.*ERROR" logfile
  d=$(date -I -d "$d + 1 day")
done
    • 0

relate perguntas