Linux查看指定时间的日志信息_linux查看指定时间段的日志-优快云博客

本文链接：https://blog.youkuaiyun.com/kevinchia/article/details/125142017

本文档展示了如何使用Linux命令来筛选特定日期和时间范围内的日志信息，以及如何定位错误日志条目。通过`sed`和`grep`命令，可以高效地查找某一天、某一时段或包含特定错误信息的日志记录，这对于系统监控和故障排除至关重要。

摘要生成于 C知道，由 DeepSeek-R1 满血版支持，前往体验 >

一、查看某天指定时间段日志信息

sed -n ‘/某年某月某日某时/,/某年某月某日某时/p’ 日志文件

[root@bj-oldboy-muban 09:36:57 log]# sed -n '/May 31 13:57:04/,/May 31 16:08:11/p' messages-20220605 
May 31 13:57:04 bj-oldboy-muban rz[14177]: [root] no.name/ZMODEM: got error
May 31 13:57:24 bj-oldboy-muban rz[14179]: [root] jdk-8u201-linux-x64.tar.gz/ZMODEM: 191817140 Bytes, 33431550 BPS
May 31 14:00:12 bj-oldboy-muban su: (to app) root on pts/0
May 31 14:01:01 bj-oldboy-muban systemd: Started Session 132 of user root.
May 31 14:01:01 bj-oldboy-muban systemd: Starting Session 132 of user root.
May 31 14:03:52 bj-oldboy-muban su: (to root) root on pts/0
May 31 14:05:24 bj-oldboy-muban su: (to app) root on pts/0
May 31 14:07:41 bj-oldboy-muban su: (to root) root on pts/0
May 31 14:08:47 bj-oldboy-muban su: (to app) root on pts/0
May 31 14:10:07 bj-oldboy-muban su: (to root) root on pts/0
May 31 14:25:11 bj-oldboy-muban systemd-logind: New session 133 of user root.
May 31 14:25:11 bj-oldboy-muban systemd: Started Session 133 of user root.
May 31 14:25:11 bj-oldboy-muban systemd: Starting Session 133 of user root.
May 31 14:25:35 bj-oldboy-muban systemd-logind: Removed session 133.
May 31 14:48:47 bj-oldboy-muban systemd-logind: Removed session 131.
May 31 14:53:21 bj-oldboy-muban systemd: Started Session 134 of user root.
May 31 14:53:21 bj-oldboy-muban systemd-logind: New session 134 of user root.
May 31 14:53:21 bj-oldboy-muban systemd: Starting Session 134 of user root.
May 31 15:00:04 bj-oldboy-muban systemd: Reloading.
May 31 15:00:23 bj-oldboy-muban systemd: Reloading.
May 31 15:00:29 bj-oldboy-muban systemd: Starting mongodb...
May 31 15:00:29 bj-oldboy-muban mongod: 2022-05-31T15:00:29.118+0800 I CONTROL  [main] note: noprealloc may hurt performance in many applications
May 31 15:00:29 bj-oldboy-muban mongod: about to fork child process, waiting until server is ready for connections.
May 31 15:00:29 bj-oldboy-muban mongod: forked process: 14898
May 31 15:00:29 bj-oldboy-muban mongod: child process started successfully, parent exiting
May 31 15:00:29 bj-oldboy-muban systemd: Started mongodb.
May 31 15:01:01 bj-oldboy-muban systemd: Started Session 135 of user root.
May 31 15:01:01 bj-oldboy-muban systemd: Starting Session 135 of user root.
May 31 15:22:15 bj-oldboy-muban systemd: Stopping mongodb...
May 31 15:22:15 bj-oldboy-muban systemd: Stopped mongodb.
May 31 15:36:40 bj-oldboy-muban rz[15079]: [root] no.name/ZMODEM: got error
May 31 15:37:16 bj-oldboy-muban sz[15085]: [root] mongodb-linux-x86_64-4.0.4.tgz/ZMODEM: 71435492 Bytes, 11347996 BPS
May 31 15:44:35 bj-oldboy-muban rz[15113]: [root] no.name/ZMODEM: got error
May 31 15:44:58 bj-oldboy-muban rz[15114]: [root] mongod_bak.sh/ZMODEM: 901 Bytes, 142070 BPS
May 31 16:01:01 bj-oldboy-muban systemd: Started Session 136 of user root.
May 31 16:01:01 bj-oldboy-muban systemd: Starting Session 136 of user root.
May 31 16:08:11 bj-oldboy-muban rz[15146]: [root] no.name/ZMODEM: got error

二、查看某天指定时间段报错日志信息

sed -n ‘/某年某月某日某时/,/某年某月某日某时/p’ 日志文件 | grep -Ei “报错信息|报错信息”

[root@bj-oldboy-muban 10:53:54 log]# sed -n '/May 31 13:57:04/,/May 31 16:08:11/p' messages-20220605 | grep -Ei "error|fails"
May 31 13:57:04 bj-oldboy-muban rz[14177]: [root] no.name/ZMODEM: got error
May 31 15:36:40 bj-oldboy-muban rz[15079]: [root] no.name/ZMODEM: got error
May 31 15:44:35 bj-oldboy-muban rz[15113]: [root] no.name/ZMODEM: got error
May 31 16:08:11 bj-oldboy-muban rz[15146]: [root] no.name/ZMODEM: got error

三、查看某天的日志信息

grep -i “某年某月某日.*” 日志文件

[root@bj-oldboy-muban 10:31:21 log]# grep -i "May 31.*" messages-20220605
May 31 00:01:01 bj-oldboy-muban systemd: Started Session 117 of user root.
May 31 00:01:01 bj-oldboy-muban systemd: Starting Session 117 of user root.
May 31 01:01:01 bj-oldboy-muban systemd: Started Session 118 of user root.
May 31 01:01:01 bj-oldboy-muban systemd: Starting Session 118 of user root.
May 31 02:01:01 bj-oldboy-muban systemd: Started Session 119 of user root.
May 31 02:01:01 bj-oldboy-muban systemd: Starting Session 119 of user root.
May 31 03:01:01 bj-oldboy-muban systemd: Started Session 120 of user root.
May 31 03:01:01 bj-oldboy-muban systemd: Starting Session 120 of user root.
May 31 04:01:01 bj-oldboy-muban systemd: Started Session 121 of user root.
May 31 04:01:01 bj-oldboy-muban systemd: Starting Session 121 of user root.
May 31 05:01:01 bj-oldboy-muban systemd: Started Session 122 of user root.
May 31 05:01:01 bj-oldboy-muban systemd: Starting Session 122 of user root.
May 31 06:01:01 bj-oldboy-muban systemd: Started Session 123 of user root.
May 31 06:01:01 bj-oldboy-muban systemd: Starting Session 123 of user root.
May 31 07:01:01 bj-oldboy-muban systemd: Started Session 124 of user root.
May 31 07:01:01 bj-oldboy-muban systemd: Starting Session 124 of user root.
May 31 08:01:01 bj-oldboy-muban systemd: Started Session 125 of user root.
May 31 08:01:01 bj-oldboy-muban systemd: Starting Session 125 of user root.
May 31 09:01:01 bj-oldboy-muban systemd: Started Session 126 of user root.
May 31 09:01:01 bj-oldboy-muban systemd: Starting Session 126 of user root.
May 31 10:01:01 bj-oldboy-muban systemd: Started Session 127 of user root.
May 31 10:01:01 bj-oldboy-muban systemd: Starting Session 127 of user root.
May 31 11:01:01 bj-oldboy-muban systemd: Started Session 128 of user root.
May 31 11:01:01 bj-oldboy-muban systemd: Starting Session 128 of user root.
May 31 12:01:01 bj-oldboy-muban systemd: Started Session 129 of user root.
May 31 12:01:01 bj-oldboy-muban systemd: Starting Session 129 of user root.
May 31 13:01:01 bj-oldboy-muban systemd: Started Session 130 of user root.
May 31 13:01:01 bj-oldboy-muban systemd: Starting Session 130 of user root.
May 31 13:06:47 bj-oldboy-muban systemd: Started Session 131 of user root.
May 31 13:06:47 bj-oldboy-muban systemd-logind: New session 131 of user root.
May 31 13:06:47 bj-oldboy-muban systemd: Starting Session 131 of user root.
May 31 13:21:30 bj-oldboy-muban rz[14009]: [root] sersync-master.zip/ZMODEM: 1981010 Bytes, 27215359 BPS
May 31 13:37:57 bj-oldboy-muban systemd: Starting Cleanup of Temporary Directories...
May 31 13:37:57 bj-oldboy-muban systemd: Started Cleanup of Temporary Directories.
May 31 13:52:07 bj-oldboy-muban su: (to app) root on pts/0
May 31 13:53:09 bj-oldboy-muban su: (to root) root on pts/0
May 31 13:53:25 bj-oldboy-muban su: (to app) root on pts/0
May 31 13:57:04 bj-oldboy-muban rz[14177]: [root] no.name/ZMODEM: got error
May 31 13:57:24 bj-oldboy-muban rz[14179]: [root] jdk-8u201-linux-x64.tar.gz/ZMODEM: 191817140 Bytes, 33431550 BPS
May 31 14:00:12 bj-oldboy-muban su: (to app) root on pts/0
May 31 14:01:01 bj-oldboy-muban systemd: Started Session 132 of user root.
May 31 14:01:01 bj-oldboy-muban systemd: Starting Session 132 of user root.
May 31 14:03:52 bj-oldboy-muban su: (to root) root on pts/0
May 31 14:05:24 bj-oldboy-muban su: (to app) root on pts/0
May 31 14:07:41 bj-oldboy-muban su: (to root) root on pts/0
May 31 14:08:47 bj-oldboy-muban su: (to app) root on pts/0
May 31 14:10:07 bj-oldboy-muban su: (to root) root on pts/0
May 31 14:25:11 bj-oldboy-muban systemd-logind: New session 133 of user root.
May 31 14:25:11 bj-oldboy-muban systemd: Started Session 133 of user root.
May 31 14:25:11 bj-oldboy-muban systemd: Starting Session 133 of user root.
May 31 14:25:35 bj-oldboy-muban systemd-logind: Removed session 133.
May 31 14:48:47 bj-oldboy-muban systemd-logind: Removed session 131.
May 31 14:53:21 bj-oldboy-muban systemd: Started Session 134 of user root.
May 31 14:53:21 bj-oldboy-muban systemd-logind: New session 134 of user root.
May 31 14:53:21 bj-oldboy-muban systemd: Starting Session 134 of user root.
May 31 15:00:04 bj-oldboy-muban systemd: Reloading.
May 31 15:00:23 bj-oldboy-muban systemd: Reloading.
May 31 15:00:29 bj-oldboy-muban systemd: Starting mongodb...
May 31 15:00:29 bj-oldboy-muban mongod: 2022-05-31T15:00:29.118+0800 I CONTROL  [main] note: noprealloc may hurt performance in many applications
May 31 15:00:29 bj-oldboy-muban mongod: about to fork child process, waiting until server is ready for connections.

四、查看某天的报错日志信息

grep -Ei “某年某月某日.*报错信息|报错信息” 日志文件

[root@bj-oldboy-muban 10:41:51 log]# grep -Ei "May 31.*error|fails" messages-20220605
May 31 13:57:04 bj-oldboy-muban rz[14177]: [root] no.name/ZMODEM: got error
May 31 15:36:40 bj-oldboy-muban rz[15079]: [root] no.name/ZMODEM: got error
May 31 15:44:35 bj-oldboy-muban rz[15113]: [root] no.name/ZMODEM: got error
May 31 16:08:11 bj-oldboy-muban rz[15146]: [root] no.name/ZMODEM: got error

五、查看某天某时的日志信息

grep -i “某年某月某日某时.*” 日志文件

[root@bj-oldboy-muban 10:33:14 log]# grep -i "May 31 13.*" messages-20220605
May 31 13:01:01 bj-oldboy-muban systemd: Started Session 130 of user root.
May 31 13:01:01 bj-oldboy-muban systemd: Starting Session 130 of user root.
May 31 13:06:47 bj-oldboy-muban systemd: Started Session 131 of user root.
May 31 13:06:47 bj-oldboy-muban systemd-logind: New session 131 of user root.
May 31 13:06:47 bj-oldboy-muban systemd: Starting Session 131 of user root.
May 31 13:21:30 bj-oldboy-muban rz[14009]: [root] sersync-master.zip/ZMODEM: 1981010 Bytes, 27215359 BPS
May 31 13:37:57 bj-oldboy-muban systemd: Starting Cleanup of Temporary Directories...
May 31 13:37:57 bj-oldboy-muban systemd: Started Cleanup of Temporary Directories.
May 31 13:52:07 bj-oldboy-muban su: (to app) root on pts/0
May 31 13:53:09 bj-oldboy-muban su: (to root) root on pts/0
May 31 13:53:25 bj-oldboy-muban su: (to app) root on pts/0
May 31 13:57:04 bj-oldboy-muban rz[14177]: [root] no.name/ZMODEM: got error
May 31 13:57:24 bj-oldboy-muban rz[14179]: [root] jdk-8u201-linux-x64.tar.gz/ZMODEM: 191817140 Bytes, 33431550 BPS

六、查看某天某时的报错日志信息

grep -Ei “某年某月某日某时.*报错信息|报错信息” 日志文件

[root@bj-oldboy-muban 10:41:59 log]# grep -Ei "May 31.13:.*error|fails" messages-20220605 
May 31 13:57:04 bj-oldboy-muban rz[14177]: [root] no.name/ZMODEM: got error