apache日志分析问题

xiachunmen

apache的日志我已经用awk整理缩减了
现在的格式如下:
[22/Jun/2011:22:00:22 +0800] 406
[22/Jun/2011:22:03:37 +0800] 309
[22/Jun/2011:22:03:45 +0800] 402
.......


现在需要将没一分钟的后面的数字(即上面  405  309  402)  相加  等到如下类型的结果
[22/Jun/2011:22:00   相加结果
[22/Jun/2011:22:01   相加结果
[22/Jun/2011:22:02   相加结果
[22/Jun/2011:22:03   相加结果
即没一分钟内的相加结果

求教了

liion631818

1. 
   
2. awk 'BEGIN{FS=":| "}{a[$1":"$2":"$3]+=$6}END{for(i in a){print i,a[i]}}' file
   

复制代码

springwind426

1. 
   
2. awk -F'[: ]+' -v OFS=":" '{n=$NF;NF-=3;}NR>1&&a!=$0{print a " " b;a=$0;b=0}{a=$0;b+=n}END{print a" "b}'
   
3. 
   

复制代码

ljbzju

awk -F'[ :]' '{if($0!="")a[$1":"$2":"$3]+=$NF}END{for(i in a)print i"\t"a[i]}' file
做题速度不够快啊，被楼上抢先了

liion631818

回复 4# ljbzju


   
还是做慢点的对啊，空行我没判断， 用$6也够烂的

ywlscpl

1. awk '{sub(/:[^:]*$/,"",$1)}$1!=v{print v,s;s=0}{v=$1;s+=$3}' file
   
2. awk '{sub(/:[^:]*$/,"",$1);a[$1]+=$3}END{for (i in a) print i,a[i]}' file

复制代码

jason680

apache的日志我已经用awk整理缩减了
现在的格式如下:
[22/Jun/2011:22:00:22 +0800] 406
[22/Jun/2011:2 ...
xiachunmen 发表于 2011-06-24 15:23

$ echo '[22/Jun/2011:22:00:22 +0800] 406
[22/Jun/2011:22:03:37 +0800] 309
[22/Jun/2011:22:03:45 +0800] 402' | awk -F':.. .+ ' '{sub("[[]","",$1);t[$1]+=$2}END{for(n in t)print n" "t[n]}'
22/Jun/2011:22:00 406
22/Jun/2011:22:03 711

267020090

tmp_time=`date '+%d/%m/%Y:%H:%M'`
echo $tmp_time >tmp
MOn=`date '+%d/%m/%Y:%H:%M' | awk -F "/" '{print $2}'`
statistics()
{
if [ "$MOn" = "01" ];then
NMOn=Jan
elif [ "$MOn" = "02" ];then
NMOn=Feb
elif [  "$MOn" = "03" ];then
NMOn=Mar
elif [  "$MOn" = "04" ];then
NMOn=Apr
elif [  "$MOn" = "05" ];then
NMOn=May
elif [  "$MOn" = "06" ];then
NMOn=Jun
elif [  "$MOn" = "07" ];then
NMOn=Jul
elif [  "$MOn" = "08" ];then
NMOn=Aug
elif [  "$MOn" = "09" ];then
NMOn=Sep
elif [  "$MOn" = "10" ];then
NMOn=Oct
elif [  "$MOn" = "11" ];then
NMOn=Nov
elif [  "$MOn" = "12" ];then
NMOn=Dec
fi
}
statistics
export TIME=`awk  'BEGIN{FS="/";print "'"$NMOn"'"}{print $1"/""'"$NMOn"'""/"$3}' tmp`
awk 'BEGIN{print ENVIRON["TIME"]}{if ($0~/[$TIME]/) print $0}' log | tee -a tmp.log