http://www.gnu.org/software/gawk/manual/gawk.html
转自:http://www.cnblogs.com/ggjucheng/archive/2013/01/13/2858470.html
参考:http://afdsse.blog.163.com/blog/static/7483802013528813713/
[size=large][color=green][b]shell获取某个时间段的nginx日志内容[/b][/color][/size]
[url]https://blog.youkuaiyun.com/kelonsen/article/details/23033485[/url]
[quote]192.168.16.105 - - [2018-03-29 14:01:40.361] "GET / HTTP/1.1" 502 172
192.168.16.105 - - [2018-03-29 14:01:40.361] "GET / HTTP/1.1" 502 172
192.168.16.105 - - [2018-03-29 14:02:40.361] "GET / HTTP/1.1" 502 172
192.168.16.105 - - [2018-03-29 14:02:44.201] "GET / HTTP/1.1" 502 172
192.168.16.105 - - [2018-03-29 14:02:45.260] "GET / HTTP/1.1" 502 172
192.168.16.105 - - [2018-03-29 14:03:45.265] "GET / HTTP/1.1" 502 172
192.168.16.105 - - [2018-03-29 14:03:46.361] "GET / HTTP/1.1" 502 172
192.168.16.105 - - [2018-03-29 14:03:47.361] "GET / HTTP/1.1" 502 172
192.168.16.105 - - [2018-03-29 14:04:40.527] "GET / HTTP/1.1" 200 26
192.168.16.105 - - [2018-03-29 14:04:48.361] "GET / HTTP/1.1" 200 26
192.168.16.105 - - [2018-03-29 14:05:44.361] "GET / HTTP/1.1" 200 26
192.168.16.105 - - [2018-03-29 14:06:49.361] "GET / HTTP/1.1" 200 26 [/quote]
针对以上内容,要查找出2018-03-29 14:03至2018-03-29 14:05之间的内容,可以使用awk命令来处理:
cat time1.log | egrep "2018-03-29 14" | awk -F ':' '$2 >= 3 && $2 <= 4'
针对以上内容,对文本内容以:来分隔,则$1的值为192.168.16.105 - - [2018-03-29
可以使用cat time1.log | egrep "2018-03-29 14" | awk -F ':' '{print $1}' 来进行验证
转自:http://www.cnblogs.com/ggjucheng/archive/2013/01/13/2858470.html
参考:http://afdsse.blog.163.com/blog/static/7483802013528813713/
[size=large][color=green][b]shell获取某个时间段的nginx日志内容[/b][/color][/size]
[url]https://blog.youkuaiyun.com/kelonsen/article/details/23033485[/url]
[quote]192.168.16.105 - - [2018-03-29 14:01:40.361] "GET / HTTP/1.1" 502 172
192.168.16.105 - - [2018-03-29 14:01:40.361] "GET / HTTP/1.1" 502 172
192.168.16.105 - - [2018-03-29 14:02:40.361] "GET / HTTP/1.1" 502 172
192.168.16.105 - - [2018-03-29 14:02:44.201] "GET / HTTP/1.1" 502 172
192.168.16.105 - - [2018-03-29 14:02:45.260] "GET / HTTP/1.1" 502 172
192.168.16.105 - - [2018-03-29 14:03:45.265] "GET / HTTP/1.1" 502 172
192.168.16.105 - - [2018-03-29 14:03:46.361] "GET / HTTP/1.1" 502 172
192.168.16.105 - - [2018-03-29 14:03:47.361] "GET / HTTP/1.1" 502 172
192.168.16.105 - - [2018-03-29 14:04:40.527] "GET / HTTP/1.1" 200 26
192.168.16.105 - - [2018-03-29 14:04:48.361] "GET / HTTP/1.1" 200 26
192.168.16.105 - - [2018-03-29 14:05:44.361] "GET / HTTP/1.1" 200 26
192.168.16.105 - - [2018-03-29 14:06:49.361] "GET / HTTP/1.1" 200 26 [/quote]
针对以上内容,要查找出2018-03-29 14:03至2018-03-29 14:05之间的内容,可以使用awk命令来处理:
cat time1.log | egrep "2018-03-29 14" | awk -F ':' '$2 >= 3 && $2 <= 4'
针对以上内容,对文本内容以:来分隔,则$1的值为192.168.16.105 - - [2018-03-29
可以使用cat time1.log | egrep "2018-03-29 14" | awk -F ':' '{print $1}' 来进行验证
本文介绍如何利用awk命令从nginx日志中筛选出指定时间段内的记录。通过对示例日志进行解析,展示了如何精确地定位并提取2018-03-29 14:03至2018-03-29 14:05之间的日志条目。
5725

被折叠的 条评论
为什么被折叠?



