awk 分析nginx日志常用命令

响应时间大于5秒,降序排序

awk -F "\"" '$8 > 5 || $1 == "182.140.237.207" {print $8}' test.log | sort -r

IP出现次数最多，降序排列

cat test.log| awk '{a[$1]++} END {for(b in a) print b":"a[b]}' | head -n 10 | sort -t ':' -k 2 -r

条件判断

awk '{if ($1==1) print "A";elseif ($1==2) print "B";else print"C"}'

打印并base64解密

awk -F "," '$4 == "reading_time" && $5 == "user_1442041" && $22 == 230317  { print $19}' hx_stats.log | base64 -d