awk 提取字段

zhaolianghz

192.168.1.1 - - [15/Jun/2016:00:01:32 +0800] open.test.com "GET /app/appJump.json?appId=4028819A4F30AA1E014F40DB410412E7&token=Rk8IwsjEcCu01kjlJHpiBexBdnVrvEBQhnVDtCcPlSgtGcSzSu6TSQ%3D%3D HTTP/1.1" 302 0 0.014 "-" "Mozilla/5.0 (Linux; U; Android 4.3; zh-cn; vivo X3L Build/JLS36C) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 Mobile Safari/534.30_w" - 192.168.1.182:8084
192.168.1.2 - - [15/Jun/2016:00:01:32 +0800] open.test.com "POST /group/praise.htm HTTP/1.1" 200 104 0.023 "-" "Dalvik/1.6.0 (Linux; U; Android 4.3; G620-L75 Build/HuaweiG620-L75)" - 192.168.1.183:8084
...
...
通过awk提取，request字段和最后的字段

awk '{print $8,$NF}'

/app/appJump.json?appId=4028819A4F30AA1E014F40DB410412E7&token=Rk8IwsjEcCu01kjlJHpiBexBdnVrvEBQhnVDtCcPlSgtGcSzSu6TSQ%3D%3D 192.168.1.182:8084
/group/praise.htm 192.168.1.183:8084

最后的想提取的结果如下所示：

/app/appJump.json 192.168.1.182:8084
/group/praise.htm 192.168.1.183:8084

该如何操作？？？求教

moperyblue

grep -oP '(?<=GET |POST )[^? ]+|(\d{1,3}\.){3}\d{1,3}:\d+\s*$'|xargs -n2

1. sed -r 's#.* (/[^? ]+).* - (.*[0-9]+).*#\1 \2#'

复制代码

jason680

回复 1# zhaolianghz

$ awk '{sub("?.+$","",$8);print $8,$NF}' FILE
/app/appJump.json 192.168.1.182:8084
/group/praise.htm 192.168.1.183:8084

   

liion631818

1. awk -F" |\?" '{print $8, $(NF-1)}'

复制代码

回复 1# zhaolianghz


   

zhaolianghz

回复 3# jason680


    谢谢

zhaolianghz

回复 4# liion631818


    谢谢，通俗易懂