请教一下web日志每秒请求数的统计命令

jihaiming

以前在论坛中看到过， 不过忘了。
tail -s 1 access.log|wc -l
这样写对吗?

codfei

就是在你执行命令的这一秒 log滚动的行数 不一定就是一秒 tail命令执行后 再sleep1秒  有可能是tail了3、4秒的日志

jihaiming

嗯, 能给个正确示例吗?

linuxboy823

应该还是用日志的时间来分析吧!!!

ywlscpl

同意4楼

codfei

给段日志吧

jihaiming

多谢各位关注,日志如下:
124.28.240.219 - - [13/Apr/2009:10:46:40 +0800] "GET / HTTP/1.1" 200 527 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729)" "-"
221.222.168.196 - - [13/Apr/2009:10:46:40 +0800] "GET /favicon.ico HTTP/1.1" 404 289 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; MAXTHON 2.0)" "-"
123.159.89.230 - - [13/Apr/2009:10:46:40 +0800] "GET /favicon.ico HTTP/1.1" 404 289 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) ; 360SE)" "-"
61.145.99.148 - - [13/Apr/2009:10:46:40 +0800] "GET / HTTP/1.1" 304 - "http://minisite.qq.com/gd08new/index.htm" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; TencentTraveler 4.0; .NET CLR 2.0.50727)" "-"
58.27.157.129 - - [13/Apr/2009:10:46:40 +0800] "GET /favicon.ico HTTP/1.1" 404 289 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0; QQDownload 1.7; SLCC1; .NET CLR 2.0.50727; .NET CLR 3.0.04506; InfoPath.2)" "-"
202.169.219.232 - - [13/Apr/2009:10:46:40 +0800] "GET / HTTP/1.1" 200 527 "http://www.sina.com.cn/" "Mozilla/5.0 (Windows; U; Windows NT 5.1; zh-CN; rv:1.9.0. Gecko/2009032609 Firefox/3.0.8" "-"
121.10.21.170 - - [13/Apr/2009:10:46:40 +0800] "GET / HTTP/1.1" 200 527 "http://www.zol.com.cn/" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; OfficeLiveConnector.1.3; OfficeLivePatch.0.0)" "-"
222.82.83.48 - - [13/Apr/2009:10:46:40 +0800] "GET /favicon.ico HTTP/1.1" 404 289 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; .NET CLR 2.0.50727)" "-"
61.145.99.148 - - [13/Apr/2009:10:46:41 +0800] "GET /favicon.ico HTTP/1.1" 404 289 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; TencentTraveler 4.0; .NET CLR 2.0.50727)" "-"

codfei

test]# cat log |awk -F"[" '{print $2;}' | awk '{print $1;}' | sort | uniq -c
      8 13/Apr/2009:10:46:40
      1 13/Apr/2009:10:46:41

ywlscpl

[root@Mylinux tmp]# awk -F '[][]' '{a[substr($2,1,20)]++}END{for (j in a) print j,a[j]}' file  
13/Apr/2009:10:46:40 8
13/Apr/2009:10:46:41 1

jihaiming

多谢楼上两位:wink: