unix内可以做到像excel般的统计吗?

cjaizss

2.
awk '!/event/{next}{gsub(/'\''/,"",$(NF-3));a[$NF]=a[$NF]"\n" $1 " "$(NF-3)}END{print "lequipmentlocation: USA";for(i in a){print "event code:",i;sub(/\n/,"",a[i]);print a[i];print "";};}' USA-log

yinyuemi

1. 1. awk -F"'" '/event/{a[$2"\t"substr($3,5)]=++b[$3]}END{for(i in a) print i"\t"a[i]|"sort -n "}' file
   
2. 
   
3. 2. awk -F "'| " 'BEGIN{print "lequipmentlocation: USA"}
   
4. /event/ {a["event code: "$NF]>0?a["event code: "$NF]="\n"$1"\t"$(NF-4):a["event code: "$NF]=a["event code: "$NF]"\n" $1"\t"$(NF-4)}
   
5. END{for (i in a) print i, a[i]"\n"}' file

复制代码

xmi

谢谢两位, 今天在公司没空呢, 待我明天一试.

xmi

1.
awk '!/event/{next}{a[$NF]++}END{for( i in a)print "event",i,a;}'
cjaizss 发表于 2011-02-10 23:38

    % awk '!/event/{next}{a[$NF]++}END{for( i in a)print "event",i,a;}' USA-log
    /event/{next: Event not found   <======= 不成功哩

xmi

2.
awk '!/event/{next}{gsub(/'\''/,"",$(NF-3));a[$NF]=a[$NF]"\n" $1 " "$(NF-3)}END{print "lequipmen ...
cjaizss 发表于 2011-02-10 23:54

    % awk '!/event/{next}{gsub(/'\''/,"",$(NF-3));a[$NF]=a[$NF]"\n" $1 " "$(NF-3)}END{print "lequipmentlocation: USA";for(i in a){print "event code:",i;sub(/\n/,"",a);print a;print "";};}' usa-log
/event/{next: Event not found  <===== 这个也不行呀?

xmi

yinyuemi 发表于 2011-02-11 03:07

    1. 那个成功, 但可以加入header吗?

   2. 那个就不行了 , 我是直接copy到unix内...
% awk -F "'| " 'BEGIN{print "lequipmentlocation: USA"}
/event/ {a["event code: "$NF]>0?a["event code: "$NF]="\n"$1"\t"$(NF-4):a["event code: "$NF]=a["event code: "$NF]"\n" $1"\t"$(NF-4)}
END{for (i in a) print i, a"\n"}'Unmatched '
% Variable syntax

   如把它写成一行的话, 也不成功:
% awk -F "'| " 'BEGIN{print "lequipmentlocation: USA"}/event/ {a["event code: "$NF]>0?a["event code: "$NF]="\n"$1"\t"$(N
F-4):a["event code: "$NF]=a["event code: "$NF]"\n" $1"\t"$(NF-4)}END{for (i in a) print i, a"\n"}' log
awk: syntax error near line 1
awk: bailing out near line 1

yinyuemi

回复 16# xmi

第二个结果是这个么？

1. 1. awk -F"'" 'BEGIN{"header1","header2","header3","header4"}/event/{a[$2"\t"substr($3,5)]=++b[$3]}END{for(i in a) print i"\t"a[i]|"sort -n "}'
   
2. 
   
3. 2. awk -F "'| " 'BEGIN{print "lequipmentlocation: USA"} /event/ {a["event code: "$NF]>0?a["event code: "$NF]="\n"$1"\t"$(NF-4):a["event code: "$NF]=a["event code: "$NF]"\n" $1"\t"$(NF-4)}END{for (i in a) print i, a[i]"\n"}' file
   
4. 
   
5. event code: 77
   
6. 09Feb11-13:55:54:283    USAP07
   
7. 
   
8. event code: 9
   
9. 09Feb11-13:59:59:982    USAP07
   
10. 
    
11. event code: 12
    
12. 09Feb11-13:45:00:108    USAE01
    
13. 
    
14. event code: 22
    
15. 09Feb11-13:56:56:133    USAP07
    
16. 
    
17. event code: 23
    
18. 09Feb11-14:00:01:245    USAP02
    
19. 09Feb11-14:00:01:253    USAP03
    
20. 09Feb11-14:00:01:254    USAE01
    
21. 09Feb11-14:00:01:255    USAP02
    
22. 09Feb11-14:00:01:258    USAP03
    
23. 09Feb11-14:00:01:260    USAP05
    
24. 
    
25. event code: 33
    
26. 09Feb11-13:45:00:716    USAA01
    
27. 
    
28. event code: 440
    
29. 09Feb11-14:00:00:035    USAP06
    
30. 09Feb11-14:00:00:050    USAE06
    
31. 09Feb11-14:00:00:051    USAP03
    
32. 09Feb11-14:00:00:072    USAP03
    
33. 09Feb11-14:00:00:075    USAP02
    
34. 09Feb11-14:00:00:081    USAP05
    
35. 
    
36. event code: 1
    
37. 09Feb11-14:00:00:016    USAP05
    
38. 
    
39. event code: 44
    
40. 09Feb11-13:45:00:151    USAP02
    
41. 
    
42. event code: 2
    
43. 09Feb11-13:59:59:998    USAP01
    
44. 
    
45. event code: 55
    
46. 09Feb11-13:50:40:303    USAA05
    
47. 
    
48. event code: 156
    
49. 09Feb11-13:55:48:228    USAP02
    
50. 
    
51. event code: 66
    
52. 09Feb11-13:56:52:380    USAP07
    
53. 
    

复制代码

xmi

回复  xmi

第二个结果是这个么？
yinyuemi 发表于 2011-02-14 13:37
1.awk -F"'" 'BEGIN{"header1","header2","header3","header4"}/event/{a[$2"\t"substr($3,5)]=++b[$3]}END{for(i in a) print i
"\t"a|"sort -n "}' log
2. awk -F "'| " 'BEGIN{print "lequipmentlocation: USA"} /event/ {a["event code: "$NF]>0?a["event code: "$NF]="\n"$1"\t"$(NF-4):a["event code: "$NF]=a["event code: "$NF]"\n" $1"\t"$(NF-4)}END{for (i in a) print i, a"\n"}' file

1.
% awk -F"'" 'BEGIN{"header1","header2","header3","header4"}/event/{a[$2"\t"substr($3,5)]=++b[$3]}END{for(i in a) print i
"\t"a|"sort -n "}' log
awk: syntax error near line 1
awk: illegal statement near line 1

2.
你个是我想要做到的, 但我这儿一行就出了以下error:
%awk -F "'| " 'BEGIN{print "lequipmentlocation: USA"} /event/ {a["event code: "$NF]>0?a["event code: "$NF]="\n"$1"\t"$(
NF-4):a["event code: "$NF]=a["event code: "$NF]"\n" $1"\t"$(NF-4)}END{for (i in a) print i, a"\n"}' log
awk: syntax error near line 1
awk: bailing out near line 1
%

cjaizss

你的awk版本?奇怪.我似乎并没有用版本的特有语法啊
把/event/换成$0~/event/
把!/event/换成$0!~/event/
试下呢

xmi

你的awk版本?奇怪.我似乎并没有用版本的特有语法啊
把/event/换成$0~/event/
把!/event/换成$0!~/event/
...
cjaizss 发表于 2011-02-14 13:43

试过了, 两个方法都说"illegal reference to array a" record number 25

% awk '$0!~/event/{next}{a[$NF]++}END{for( i in a)print "event",i,a;}' log
awk: illegal reference to array a
record number 25
%

% awk '$0~/event/{next}{a[$NF]++}END{for( i in a)print "event",i,a;}' log
awk: illegal reference to array a
record number 25
%