怎么用AWK一条命令匹配下面的日志

Mylib

2015-06-01 16:48:22,787 INFO: request:searchbaidu ip:192.168.3.171 urlbaidu/services/baiduService) paramsmethod=[searchbaidu],abId=[1],chId=[5],ids=[71],ip=[8.8.8.8],sc=[2],lpsc=[2],hbs=[3],pid=[1],pidOp=[0],doST=[0]) timeCost:4(ms) [MyLog.java:22]
2015-06-01 16:48:22,839 INFO: request:searchbaidu ip:192.168.3.62 url:baidu/services/baiduService) paramsmethod=[searchbaidu],testId=[226],abId=[1],count=[1]) timeCost:5(ms) [MyLog.java:12]
2015-06-01 16:48:22,840 INFO: request:searchbaidu ip:192.168.2.87 urlbaidu/services/baiduService) paramsmethod=[searchbaidu],abId=[3],date=[[20150608,20150609}],testId=[28],ip=[61.155.197.251],sc=[2],chId=[2],doST=[1],lpsc=[21],hbs=[3],pid=[1],pidOp=[0],stp=[tb:1;],stTp=[3]) timeCost:25(ms) [MyLog.java:52]


匹配 timeCost: 大于 5ms 的就打印该行

谢谢

dn833

1. grep -P 'timeCost:([6-9]|\d\d+)'

复制代码

jason680

回复 1# Mylib

>> 匹配 timeCost: 大于 5ms 的就打印该行

WYTIWYC (What You Think Is What You Code)

$ awk -vt=5 '{if(match($0,/ timeCost:([0-9]+)/,a))if(a[1]>t)print}' FILE2015-06-01 16:48:22,840 INFO: request:searchbaidu ip:192.168.2.87 urlbaidu/services/baiduService) paramsmethod=[searchbaidu],abId=[3],date=[[20150608,20150609}],testId=[28],ip=[61.155.197.251],sc=[2],chId=[2],doST=[1],lpsc=[21],hbs=[3],pid=[1],pidOp=[0],stp=[tb:1;],stTp=[3]) timeCost:25(ms) [MyLog.java:52]

liuyu85

1. awk -F'[ (:]' '$(NF-3)>5'

复制代码

zxy877298415

1. awk -F '[: ]+' '$(NF-2)+0>5' file

复制代码

回复 1# Mylib