日志分析对于时间段选择的一个问题

ywlscpl

1. awk -F '[][]' -v start='2010 03 02 16 00 00' -v end='2010 03 03 16 00 00' 'BEGIN{s=mktime(start);e=mktime(end)}NR==FNR{a[$1]=$2}NR>FNR{split($2,m,"[/: ]");time=mktime(m[3]" "a[m[2]]" "m[1]" "m[4]" "m[5]" "m[6]);if (time>=s&&time<=e) print}' <(for i in `seq 12`; do i1=`printf "%02d" $i`;LANG=C date +%b"["$i -d 2009${i1}01; done) file

复制代码