- 论坛徽章:
- 0
|
我使用ksh写脚本实现抓取tomcat日志中的某类异常的堆栈信息,
思想是先grep一遍日志文件,产生
2007-5-21 20:58:01 ***class java.lang.NullPointerException
这种异常第一行组成的文件并带在原始文件中行号
然后遍历生成的带行号的文件
根据行号去取出从该行开始的错误堆栈信息
有可能这行下面是正常输出了
现在剩下一个问题是
怎样判断这行是 at开始的异常,还是正常的日期开始的info信息
nextline=2008:01:01dafdad
if [[ $nextline = [0-9]\{4\}[/-.:][0-2][0-9] ]]
then
echo "is error"
else
echo "not error"
fi
下面是全部代码
#!/bin/ksh
param_count=$#
newer=$1
###
if (( param_count < 2 ))
then
echo "need input file"
exit
else
"please input a days to patch change"
fi
log=$1
out=/tmp/log/$log"_err.txt"
tempdir=/tmp/log/$log
out=$tempdir"/"$log"_err.txt"
typeset -i allline
allline=`cat $log |wc -l`
if [[ -d $tempdir ]]
then
echo "exists " $tempdir
else
mkdir $tempdir
fi
err=$2
#test
#log=/app/tomcatlog/log15/catalina20080219
#err=NullPointer
grep -n $err $log >$tempdir/1.txt
sed '-e /FileNotFoundException: \/usr\/Safe/d' $tempdir/1.txt >$tempdir/2.txt
cat $tempdir/2.txt | awk -F : '{print $1}' > $tempdir/100.txt
typeset -i aline
nextline=''
while read aline
do
if (( $aline < $allline ))
then
nextline=`awk 'NR=='${aline}'' $log`
#next line is error stack,print it
if [[ $nextline = \([0-9]\{4\}[/-.:][0-2][0-9][/-.:][0-3][0-9]\) ]]
then
awk 'NR=='${aline}',NR=='${aline+10}' {printf $0}' $log >> $out
else
awk 'NR=='${aline}' {printf $0}' $log >> $out
fi
else
awk 'NR=='${aline}' {printf $0}' $log >> $out
fi
done <$tempdir/100.txt |
|