以Nginx日志为例
#查找时间区内关键字的前后10行,并输出到新的文件中。
awk '{split($4,array,"[");if(array[2]>="09/Feb/2023:22:39:50" && array[2]<="09/Feb/2023:22:45:58"){print $0}}' access.log | grep "xxxx关键字" -C 10 > 202302.log
cat access.log | grep "09/Feb/2023" | sed -n '/22:39:50/,/22:40:50/p' > 202302.log