- 论坛徽章:
- 2
|
回复 16# xmi
第二个结果是这个么?- 1. awk -F"'" 'BEGIN{"header1","header2","header3","header4"}/event/{a[$2"\t"substr($3,5)]=++b[$3]}END{for(i in a) print i"\t"a[i]|"sort -n "}'
- 2. awk -F "'| " 'BEGIN{print "lequipmentlocation: USA"} /event/ {a["event code: "$NF]>0?a["event code: "$NF]="\n"$1"\t"$(NF-4):a["event code: "$NF]=a["event code: "$NF]"\n" $1"\t"$(NF-4)}END{for (i in a) print i, a[i]"\n"}' file
- event code: 77
- 09Feb11-13:55:54:283 USAP07
- event code: 9
- 09Feb11-13:59:59:982 USAP07
- event code: 12
- 09Feb11-13:45:00:108 USAE01
- event code: 22
- 09Feb11-13:56:56:133 USAP07
- event code: 23
- 09Feb11-14:00:01:245 USAP02
- 09Feb11-14:00:01:253 USAP03
- 09Feb11-14:00:01:254 USAE01
- 09Feb11-14:00:01:255 USAP02
- 09Feb11-14:00:01:258 USAP03
- 09Feb11-14:00:01:260 USAP05
- event code: 33
- 09Feb11-13:45:00:716 USAA01
- event code: 440
- 09Feb11-14:00:00:035 USAP06
- 09Feb11-14:00:00:050 USAE06
- 09Feb11-14:00:00:051 USAP03
- 09Feb11-14:00:00:072 USAP03
- 09Feb11-14:00:00:075 USAP02
- 09Feb11-14:00:00:081 USAP05
- event code: 1
- 09Feb11-14:00:00:016 USAP05
- event code: 44
- 09Feb11-13:45:00:151 USAP02
- event code: 2
- 09Feb11-13:59:59:998 USAP01
- event code: 55
- 09Feb11-13:50:40:303 USAA05
- event code: 156
- 09Feb11-13:55:48:228 USAP02
- event code: 66
- 09Feb11-13:56:52:380 USAP07
复制代码 |
|