Shell 脚本实现日志比较

joseph_stain

各位大侠帮个忙！谢啦！
我的日志sms.log信息如下：
[monitor@cat ~]$ sudo grep 'mobile cat' /usr/local/cat_proxy/mobile/log/sms.log

2011-08-01 17:19:03,860 [INFO] RecvMessage ==>[msgId=***, srcTermId=10658630, destTermId=***, content=This is mobile cat.]
2011-08-01 17:19:03,860 [INFO] SendMessage ==>[msgId=***, srcTermId=10658630, destTermId=***, content=This is mobile cat.]
2011-08-01 18:27:49,116 [INFO] RecvMessage ==>[msgId=***, srcTermId=10658630, destTermId=***, content=This is mobile cat.]
2011-08-01 18:27:49,116 [INFO] SendMessage ==>[msgId=***, srcTermId=10658630, destTermId=***, content=This is mobile cat.]
2011-08-01 18:43:26,679 [INFO] RecvMessage ==>[msgId=***, srcTermId=10658630, destTermId=***, content=This is mobile cat.]
2011-08-01 18:43:26,680 [INFO] SendMessage ==>[msgId=***, srcTermId=10658630, destTermId=***, content=This is mobile cat.]
2011-08-01 18:57:53,881 [INFO] RecvMessage ==>[msgId=***, srcTermId=10658630, destTermId=***, content=This is mobile cat.]
2011-08-01 18:57:53,881 [INFO] SendMessage ==>[msgId=***, srcTermId=10658630, destTermId=***, content=This is mobile cat.]
2011-08-01 19:13:01,199 [INFO] RecvMessage ==>[msgId=***, srcTermId=10658630, destTermId=***, content=This is mobile cat.]
2011-08-01 19:13:01,199 [INFO] SendMessage ==>[msgId=***, srcTermId=10658630, destTermId=***, content=This is mobile cat.]
2011-08-01 19:28:02,078 [INFO] RecvMessage ==>[msgId=***, srcTermId=10658630, destTermId=***, content=This is mobile cat.]
2011-08-01 19:28:02,078 [INFO] SendMessage ==>[msgId=***, srcTermId=10658630, destTermId=***, content=This is mobile cat.]
2011-08-01 19:43:05,869 [INFO] RecvMessage ==>[msgId=***, srcTermId=10658630, destTermId=***, content=This is mobile cat.]
2011-08-01 19:43:05,869 [INFO] SendMessage ==>[msgId=***, srcTermId=10658630, destTermId=***, content=This is mobile cat.]

怎样用Shell脚本实现每15分钟查看一下sms.log日志信息，如果输出的包含'mobile cat'的行数大于上个15分钟检测输出的值，并输出0，否则输出1？

谢谢啦！

joseph_stain

还有啊！
sms日志每天凌晨00:00清空啊！

谢谢啦！

lz66

grep 'mobile cat' sms.log>test1
k=`awk -F, '{a[$3]++}END{print a[$3]}' test1`
if [ "$k" > 15 ]
then
echo "0"
else
echo "1"
fi
rm -rf test1

joseph_stain

回复 3# lz66


    非常感谢你能回复！
    不好意思能稍作解释一下么？
    比如a[$3] ？
    试了一下 awk -F, '{a[$3]++}END{print a[$3]}' /usr/local/cat_proxy/mobile/log/sms.log  输出的结果为2啊？？
    谢谢啦！

lz66

我在看看，我试了是14的

joseph_stain

我在看看，我试了是14的
lz66 发表于 2011-08-01 20:44

    谢谢！
    不好是我搞错了！
    怎么和15比较呢？我的意思是每十五分钟和上一次检测输出的行数比较啊？
    还有就是每天凌晨00:00 sms日志要清零的啊？
    谢谢啦！大侠！

lz66

grep 'mobile cat' sms.log>test1
k=`awk -F, '{a[$3]++}END{print a[$3]}' test1`
if [ "$k" -gt 15 ]
then
echo "0"
else
echo "1"
fi
rm -rf test1

lz66

我也记错了，你可以每十五分钟执行一次脚本就行了

lz66

while true
do
grep 'mobile cat' sms.log>test1
awk -F, '{a[$3]++}END{print a[$3]}' test1 >> sum
rm -rf test1
k=`tail -2 sum|sed -n '1 p'`
b=`tail -1 sum|sed -n '1 p'`
if [ "$k" -gt "$b" ];then
echo "0"
else
echo "1"
fi
sleep 15
done
不知道这样行不行，我没试