unix内可以做到像excel般的统计吗?

xmi

每个location都有一个log, 如usa-log, chn-log, kor-log ...... (有60个).
unix内可以做到像excel般的统计吗?
即想做:
1: 以usa-log的内容做一summary, 显示到每一个location的equipment (USAE01)有多少个event 12, event 440 .....
2: 以usa-log的内容做一个report, 显示如下:
lequipmentlocation: USA
event code: 12
09Feb11-13:45:00:108 USAE01
09Feb11-14:00:00:016 USAP05

event code: 440
09Feb11-14:00:00:035 USAP06
09Feb11-14:00:00:050 USAE06
09Feb11-14:00:00:051 USAP03
09Feb11-14:00:00:072 USAP03
09Feb11-14:00:00:075 USAP02
09Feb11-14:00:00:081 USAP05
.....

会不会天马行空呢?
-------------------------------------------------------
终于行了 ....
依cjaizss兄和yinyuemi (SS)的把 awk改为nawk就可以出现我想要的结果.

1. 
   
2. cjaizss:
   
3. nawk '$0!~/event/{next}{gsub(/'\''/,"",$(NF-3));a[$NF]=a[$NF]"\n" $1 " "$(NF-3)}END{print "lequipmentlocation: USA";for(i in a){print "event code:",i;sub(/\n/,"",a[i]);print a[i] "\n"}}'  log
   
4. 
   
5. yinyuemi (SS):
   
6. nawk -F "'| " 'BEGIN{print "lequipmentlocation: USA"} /event/{a["event code: "$NF]>0?a["event code: "$NF]="\n"$1"\t"$(NF-4):a["event code: "$NF]=a["event code: "$NF]"\n" $1"\t"$(NF-4)}END{for (i in a) print i, a[i]"\n"}'  log
   
7. 
   
8. result:
   
9. equipmentlocation: USA
   
10. event code: 2
    
11. 09Feb11-13:59:59:998 USAP01
    
12. 
    
13. event code: 22
    
14. 09Feb11-13:56:56:133 USAP07
    
15. 
    
16. event code: 23
    
17. 09Feb11-14:00:01:245 USAP02
    
18. 09Feb11-14:00:01:253 USAP03
    
19. 09Feb11-14:00:01:254 USAE01
    
20. 09Feb11-14:00:01:255 USAP02
    
21. 09Feb11-14:00:01:258 USAP03
    
22. 09Feb11-14:00:01:260 USAP05
    
23. 
    
24. event code: 9
    
25. 09Feb11-13:59:59:982 USAP07
    
26. 
    
27. event code: 77
    
28. 09Feb11-13:55:54:283 USAP07
    
29. 
    
30. event code: 44
    
31. 09Feb11-13:45:00:151 USAP02
    

复制代码

但我怎也做不到依event code的大group做排列 (依event code 由细到大)? 请问要如何改呢?


另yinyuemi (SS)的出现统计错误, 可以如何更正呢?

1. awk -F"'" '/event/{a[$2"\t"substr($3,5)]=++b[$3]}END{for(i in a) print i"\t"a[i]|"sort -n "}' FileName
   
2. 
   
3. result:
   
4. USAA01   event 33       1
   
5. USAA05   event 55       1
   
6. USAE01   event 12       1
   
7. USAE01   event 23       3
   
8. USAE06   event 440      2
   
9. USAP01   event 2        1
   
10. USAP02   event 156      1
    
11. USAP02   event 23       4
    
12. USAP02   event 44       1
    
13. USAP02   event 440      5
    
14. USAP03   event 23       5
    
15. USAP03   event 440      4
    
16. USAP05   event 1        1
    
17. USAP05   event 23       6
    
18. USAP05   event 440      6
    
19. USAP06   event 440      1
    
20. USAP07   event 22       1
    
21. USAP07   event 66       1
    
22. USAP07   event 77       1
    
23. USAP07   event 9        1
    

复制代码

cjaizss

当然可以,awk吧
awk '/event code/{current=$NF;}/[0-9][0-9]:[0-9][0-9]:[0-9][0-9]/{a[current]++}END{for(i in a)print i,a[i]}'

xmi

当然可以,awk吧
awk '/event code/{current=$NF;}/[0-9][0-9]:[0-9][0-9]:[0-9][0-9]/{a[current]++}END{f ...
cjaizss 发表于 2011-02-10 13:03

    好像没有指定档名?  我按下enter良久也没有output?

cjaizss

后面跟文件名

xmi

回复 4# cjaizss


    我试验了, 把档名加在最后, 但结果它只display了'24'..........为什么呢?

cjaizss

回复  cjaizss


    我试验了, 把档名加在最后, 但结果它只display了'24'..........为什么呢?
xmi 发表于 2011-02-10 17:50

    不会吧
$ echo 'lequipmentlocation: USA
event code: 12
09Feb11-13:45:00:108 USAE01
09Feb11-14:00:00:016 USAP05

event code: 440
09Feb11-14:00:00:035 USAP06
09Feb11-14:00:00:050 USAE06
09Feb11-14:00:00:051 USAP03
09Feb11-14:00:00:072 USAP03
09Feb11-14:00:00:075 USAP02
09Feb11-14:00:00:081 USAP05 ' | awk '/event code/{current=$NF;}/[0-9][0-9]:[0-9][0-9]:[0-9][0-9]/{a[current]++}END{for(i in a)print i,a}'
12 2
440 6

xmi

回复 6# cjaizss


真的是呀! 在公司试验时, 我输入:
awk '/event code/{current=$NF;}/[0-9][0-9]:[0-9][0-9]:[0-9][0-9]/{a[current]++}END{for(i in a)print i,a}' USA-log

它的结果只有24 ...
为什么你要echo???

cjaizss

$ cat USA-log
lequipmentlocation: USA
event code: 12
09Feb11-13:45:00:108 USAE01
09Feb11-14:00:00:016 USAP05

event code: 440
09Feb11-14:00:00:035 USAP06
09Feb11-14:00:00:050 USAE06
09Feb11-14:00:00:051 USAP03
09Feb11-14:00:00:072 USAP03
09Feb11-14:00:00:075 USAP02
09Feb11-14:00:00:081 USAP05
$ awk '/event code/{current=$NF;}/[0-9][0-9]:[0-9][0-9]:[0-9][0-9]/{a[current]++}END{for(i in a)print i,a[i]}' USA-log
12 2
440 6

cjaizss

理会错了你的意思

cjaizss

1.
awk '!/event/{next}{a[$NF]++}END{for( i in a)print "event",i,a;}'