Shell 腳本實現(xiàn)日志比較

joseph_stain

各位大俠幫個忙！謝啦！
我的日志sms.log信息如下：
[monitor@cat ~]$ sudo grep 'mobile cat' /usr/local/cat_proxy/mobile/log/sms.log

2011-08-01 17:19:03,860 [INFO] RecvMessage ==>[msgId=***, srcTermId=10658630, destTermId=***, content=This is mobile cat.]
2011-08-01 17:19:03,860 [INFO] SendMessage ==>[msgId=***, srcTermId=10658630, destTermId=***, content=This is mobile cat.]
2011-08-01 18:27:49,116 [INFO] RecvMessage ==>[msgId=***, srcTermId=10658630, destTermId=***, content=This is mobile cat.]
2011-08-01 18:27:49,116 [INFO] SendMessage ==>[msgId=***, srcTermId=10658630, destTermId=***, content=This is mobile cat.]
2011-08-01 18:43:26,679 [INFO] RecvMessage ==>[msgId=***, srcTermId=10658630, destTermId=***, content=This is mobile cat.]
2011-08-01 18:43:26,680 [INFO] SendMessage ==>[msgId=***, srcTermId=10658630, destTermId=***, content=This is mobile cat.]
2011-08-01 18:57:53,881 [INFO] RecvMessage ==>[msgId=***, srcTermId=10658630, destTermId=***, content=This is mobile cat.]
2011-08-01 18:57:53,881 [INFO] SendMessage ==>[msgId=***, srcTermId=10658630, destTermId=***, content=This is mobile cat.]
2011-08-01 19:13:01,199 [INFO] RecvMessage ==>[msgId=***, srcTermId=10658630, destTermId=***, content=This is mobile cat.]
2011-08-01 19:13:01,199 [INFO] SendMessage ==>[msgId=***, srcTermId=10658630, destTermId=***, content=This is mobile cat.]
2011-08-01 19:28:02,078 [INFO] RecvMessage ==>[msgId=***, srcTermId=10658630, destTermId=***, content=This is mobile cat.]
2011-08-01 19:28:02,078 [INFO] SendMessage ==>[msgId=***, srcTermId=10658630, destTermId=***, content=This is mobile cat.]
2011-08-01 19:43:05,869 [INFO] RecvMessage ==>[msgId=***, srcTermId=10658630, destTermId=***, content=This is mobile cat.]
2011-08-01 19:43:05,869 [INFO] SendMessage ==>[msgId=***, srcTermId=10658630, destTermId=***, content=This is mobile cat.]

怎樣用Shell腳本實現(xiàn)每15分鐘查看一下sms.log日志信息，如果輸出的包含'mobile cat'的行數(shù)大于上個15分鐘檢測輸出的值，并輸出0，否則輸出1？

謝謝啦！

joseph_stain

還有��！
sms日志每天凌晨00:00清空啊！

謝謝啦！

lz66

grep 'mobile cat' sms.log>test1
k=`awk -F, '{a[$3]++}END{print a[$3]}' test1`
if [ "$k" > 15 ]
then
echo "0"
else
echo "1"
fi
rm -rf test1

joseph_stain

回復 3# lz66


    非常感謝你能回復！
    不好意思能稍作解釋一下么？
    比如a[$3] ？
    試了一下 awk -F, '{a[$3]++}END{print a[$3]}' /usr/local/cat_proxy/mobile/log/sms.log  輸出的結(jié)果為2啊？？
    謝謝啦！

lz66

我在看看，我試了是14的

joseph_stain

我在看看，我試了是14的
lz66 發(fā)表于 2011-08-01 20:44

    謝謝！
    不好是我搞錯了！
    怎么和15比較呢？我的意思是每十五分鐘和上一次檢測輸出的行數(shù)比較��？
    還有就是每天凌晨00:00 sms日志要清零的�。�
    謝謝啦！大俠！

lz66

grep 'mobile cat' sms.log>test1
k=`awk -F, '{a[$3]++}END{print a[$3]}' test1`
if [ "$k" -gt 15 ]
then
echo "0"
else
echo "1"
fi
rm -rf test1

lz66

我也記錯了，你可以每十五分鐘執(zhí)行一次腳本就行了

lz66

while true
do
grep 'mobile cat' sms.log>test1
awk -F, '{a[$3]++}END{print a[$3]}' test1 >> sum
rm -rf test1
k=`tail -2 sum|sed -n '1 p'`
b=`tail -1 sum|sed -n '1 p'`
if [ "$k" -gt "$b" ];then
echo "0"
else
echo "1"
fi
sleep 15
done
不知道這樣行不行，我沒試