问一个取数据的问题，大神帮帮忙

jimmy14k

2014-03-04 11:30:17,873 INFO [com.fs.map.action.MapBaseAction] - <=========> Exit getLocations> catalina-exec-19
2014-03-04 11:30:26,435 INFO [com.fs.base.action.SysMenuAction] - <=========> Entry panelTree> catalina-exec-20
2014-03-04 11:30:26,451 INFO [com.fs.base.action.SysMenuAction] - <=========> Exit panelTree> catalina-exec-20
2014-03-04 11:30:26,451 INFO [com.fs.base.action.SysMenuAction] - <=========> Entry collectList> catalina-exec-1
2014-03-04 11:30:26,451 INFO [com.fs.base.action.SysMenuAction] - <=========> Exit collectList> catalina-exec-1
2014-03-04 11:30:36,982 INFO [com.fs.map.action.MapBaseAction] - <=========> Exit realTimeLocation> catalina-exec-13
2014-03-04 11:30:40,435 INFO [com.fs.map.action.MapBaseAction] - <=========> Entry realTimeLocation> catalina-exec-9
2014-03-04 11:30:40,435 DEBUG [com.fs.map.action.MapBaseAction] - <l start> catalina-exec-9
2014-03-04 11:30:45,982 DEBUG [com.fs.map.action.MapBaseAction] - <l finish> catalina-exec-9
2014-03-04 11:30:45,998 ERROR [com.fs.map.action.MapBaseAction] - <java.rmi.NoSuchObjectException: no such object in table> catalina-exec-9



以当前时间为基准，输出当前时间前2小时以内的ERROR日志。该怎么写？？？

只用判断时间就可以了,日期不用判断，日志是每天生成一个的

LikeLx

1. awk -F '[ ,]' -va=`date +%H:%M:%S` -vb=`date +%H:%M:%S '-d -2 hour'` '$2>=b&&$2<=a&&$0~/ERROR/'

复制代码

a=是你系统时间，b=2个小时之前的时间，不知道符合你的要求不？

jimmy14k

回复 2# LikeLx
嗯。可以，谢谢啦！这儿大神真多啊。文本处理类好像没有解决不了的

   

yestreenstars

像凌晨1点50分这种时间点就不好判断了~

与天笑

1. awk 'BEGIN{cur=systime();} {split($1,d,"-");split(substr($2,0,8),t,":"); this=mktime(sprintf("%d %d %d %d %d %d", d[1],d[2],d[3],t[1],t[2],t[3])); if (cur - this < 7200 && $3=="ERROR"){print $0;}}' a.log

复制代码

haokoo

awk -F "[ :]+" 'BEGIN{ "date \"+%H\""|getline t} {if($2<=t && $2>=(t-1)) print $0}' file


我的代码好粗糙...请忽略

jason680

回复 1# jimmy14k

you can set the variable for yourself

bt (before time) can be 5h, 3.5h, 150m, 30m, ...   # h for hours, m for minutes

item can be "ERROR", "INFO", or both "INFO|ERROR"

# awk -F, -vbt=5h -vitem="ERROR" 'BEGIN{if(bt~/h/)bt*=3600;if(bt~/m/)bt*=60}{t=$1;gsub(/[:-]/," ",t);now=systime();t=mktime(t);if(now-bt<=t&&t<=now&&$0~"\\<"item"\\>")print $0}' FILE
2014-03-04 11:30:45,998 ERROR [com.fs.map.action.MapBaseAction] - <java.rmi.NoSuchObjectException: no such object in table> catalina-exec-9