【求助】提取时间段之间的日志内容，有点特殊

jason680

回复 10# cooluncle

变通一下(按年月日时分秒...)一样可行才对
Jan => 01
Feb => 02
...
Dec => 12
   

cooluncle

回复 11# jason680
一般系统或应用软件产生的日志里，操作的时间戳都是类似于“Feb 16 10:12:13”这样的格式，有时候要取任意给定时间范围的日志，就难免需要比较时间大小。除了将时间装换成秒数来比较，不知大侠是否有更好的办法？
   

jason680

回复 12# cooluncle

1. date
2. awk mktime
3. do it by ourselves

$ cat /tmp/log
Jan 15 04:03:03 xxxx-server-mic cups: cupsd shutdown succeeded
Jan 16 02:03:03 xxxx-server-mic cups: cupsd startup succeeded
Feb 15 15:25:40 xxxx-server-mic kernel: igb: eth0 NIC Link is Down
Feb 16 08:01:01 xxxx-server-mic auditd[4954]: Audit daemon rotating log files

s for start time
e for end of time
t for time by each line
m for month array, and you need add more data for 12 months

$ awk -v s="Jan 15 05:08:00" -v e="Feb 15 20:00:00" 'BEGIN{m["Jan"]="01";m["Feb"]="02";s=m[substr(s,1,3)]s;e=m[substr(e,1,3)]e}{t=m[$1]$1" "$2" "$3;if(s<=t&&t<=e)print}' /tmp/log
Jan 16 02:03:03 xxxx-server-mic cups: cupsd startup succeeded
Feb 15 15:25:40 xxxx-server-mic kernel: igb: eth0 NIC Link is Down


   

cooluncle

回复 13# jason680
(*^◎^*)...大侠处理问题的思路不拘一格，学习了....