求救，在hp unix 下，如何將日志中當(dāng)前時(shí)間的前一分鐘內(nèi)日志截取出來(lái)？

moshangxie

在hp unix 下，如何將日志中當(dāng)前時(shí)間的前一分鐘內(nèi)日志截取出來(lái)？
日志按照天生成，格式如下：

Mon Nov 30 08:11:00 2015 : Auth: Login OK: [aaa9999/999999] (from client localhost port 0)
Mon Nov 30 08:12:10 2015 : Auth: Login OK: [aaa9999/999999] (from client localhost port 0)
Mon Nov 30 08:12:12 2015 : Auth: Login OK: [aaa9999/999999] (from client localhost port 0)
Mon Nov 30 08:12:20 2015 : Auth: Login OK: [aaa9999/999999] (from client localhost port 0)
Mon Nov 30 08:13:01 2015 : Auth: Login OK: [aaa9999/999999] (from client localhost port 0)
Mon Nov 30 08:13:06 2015 : Auth: Login OK: [aaa9999/999999] (from client localhost port 0)
Mon Nov 30 08:15:00 2015 : Auth: Login OK: [aaa9999/999999] (from client localhost port 0)
Mon Nov 30 08:15:23 2015 : Auth: Login OK: [aaa9999/999999] (from client localhost port 0)
Mon Nov 30 08:15:25 2015 : Auth: Login OK: [aaa9999/999999] (from client localhost port 0)
Mon Nov 30 08:15:40 2015 : Auth: Login OK: [aaa9999/999999] (from client localhost port 0)
Mon Nov 30 08:15:43 2015 : Auth: Login OK: [aaa9999/999999] (from client localhost port 0)

例如，當(dāng)前時(shí)間為Mon Nov 30 08:16:43 2015 ，如何將Mon Nov 30 08:15:00 2015 到Mon Nov 30 08:14:00 2015  之間的 Auth次數(shù)打印出來(lái)，謝謝

Herowinter

回復(fù) 1# moshangxie

我覺(jué)得是這樣, 未測(cè)試.

1. awk '{cmd="date -d\""$1" "$2" "$3" "$4" "$5"\" +%s";cmd|getline t;t=systime()-t;if(t>0&&t<=60)print;close(cmd)}' urfile

復(fù)制代碼

moshangxie

回復(fù) 2# Herowinter
hp unix 下沒(méi)有 date -d，以及systime()語(yǔ)法

   

Herowinter

回復(fù) 3# moshangxie

自己進(jìn)行日期換算吧, 參考這個(gè)帖子.
http://72891.cn/thread-1772999-1-1.html

   

jcdiy0601

沒(méi)UNIX沒(méi)法測(cè)試

jason680

>> 例如，當(dāng)前時(shí)間為Mon Nov 30 08:16:43 2015 ，如何將Mon Nov 30 08:15:00 2015 到Mon Nov 30 08:14:00 2015  之間的 Auth次數(shù)打印出來(lái)，謝謝


modify by yourself
$time=1448842603
change to
$time=time


$ perl -MPOSIX -lane 'BEGIN{$time=1448842603;print "time=",strftime("%c",localtime($time));$S=(int($time/60)-2)*60;$E=$S+60;($s,$e)=map{strftime("%c",localtime($_))}($S,$E);print "$s\n$e"}{$t="@F[0..4]"; print if($s lt $t && $t le $e)}' FILE
time=Mon Nov 30 08:16:43 2015
Mon Nov 30 08:14:00 2015
Mon Nov 30 08:15:00 2015
Mon Nov 30 08:15:00 2015 : Auth: Login OK: [aaa9999/999999] (from client localhost port 0)

扯淡的青春要扯淡對(duì)待

1.感覺(jué)sed -n '//,//p' 稍微簡(jiǎn)單
2.awk '{a=$4;gsub(/:/,"",a);if (a>=081400&&a<=081500){print $0}}'  日志文件

dn833

1. 
   
2. grep -c '^Mon Nov 30 08:1[45]:[0-5][0-6] : Auth'

復(fù)制代碼