awk过滤出消息/规则，显示合并消息个数
awk过滤出消息/规则，显示合并消息个数
提问于 2018-09-24 21:35:04
对于我工作的公司，我想过滤掉(实际上是:2)日志文件中的某些消息。
这些消息只是信息性的，在排除错误/故障时并不是特别有用。
经过长时间的讨论(我也发了一个类似的问题，但对于Windows和它是PS/BS (某种“牛粪”) ;)
我认为AWK适合这项工作，我有一个shell脚本。然而，它没有运行(预期的)。有人能帮我“填空”吗？
#!/bin/bash
## URL that could have been the answer (but not quite) https://stackoverflow.com/questions/10842118/explain-this-duplicate-line-removing-order-retaining-one-line-awk-command
###To sort by what you WANT to see:
##e.g awk '/term to search/' dpkg.log
#if
# $var_show awk '/installed/' syslog/dpkg.log
# then
# printf('$var_show')
#fi
##Show what DONT want to see.
if
#$var_notshow awk /'what not to display'/ syslog/dpkg.log
$var_notshow awk /'Status Installed'/ dpkg.log
then
wc -1 > $var_notshow
#echo number of merged messages (of the same content): xxx merged messages #< is the amount
echo Messages of Status installed: $var_notshow were merged
fi
###!!Show the amount of rules (when the same rule/logged event) that were merged
## E.g. (multiple lines which state: "Status Installed: xxxxxxxxxxxxx" ) and display it as: "Messages of Status Installed: xxxx were merged. Totalling: # of messages (of Status Installed)" were merged.
### Finally, save it in a different file.
#Like: ?? how to do that?所以，基本上我有两种方法:过滤你想要或不想要的东西。开始过滤掉我不想要的消息可能会更好/更干净。
是的，作为概念证明，我在我的测试机器中使用了一个标准的日志文件。我可以把它转换成公司特定的信息...
摘录自日志文件：
11:56:31 status half-configured grep:amd64 3.1-2
11:56:32 status installed grep:amd64 3.1-2
11:56:32 configure debconf:all 1.5.66 <none>
11:56:32 status unpacked debconf:all 1.5.66
11:56:32 status unpacked debconf:all 1.5.66
11:56:32 status unpacked debconf:all 1.5.66
11:56:32 status half-configured debconf:all 1.5.66
11:56:32 status installed debconf:all 1.5.66
11:56:32 configure gzip:amd64 1.6-5ubuntu1 <none>
11:56:33 status half-configured util-linux:amd64 2.31.1-0.
11:56:34 status installed util-linux:amd64 2.31.1-0.4ubuntu3
11:56:34 configure libpam-modules-bin:amd64 1.1.8-3.6ubuntu2 <none>
11:56:34 status unpacked libpam-modules-bin:amd64 1.1.8-3.6ubuntu2
11:56:34 status half-configured libpam-modules-bin:amd64 1.1.8-3.6ubuntu2
11:56:34 status installed libpam-modules-bin:amd64 1.1.8-3.6ubuntu2
11:56:34 configure mount:amd64 2.31.1-0.4ubuntu3 <none>
11:56:34 status unpacked mount:amd64 2.31.1-0.4ubuntu3
11:56:34 status half-configured mount:amd64 2.31.1-0.4ubuntu3
11:56:34 status installed mount:amd64 2.31.1-0.4ubuntu3
11:56:34 configure procps:amd64 2:3.3.12-3ubuntu1 <none>
11:56:34 status unpacked procps:amd64 2:3.3.12-3ubuntu1
11:56:34 status unpacked procps:amd64 2:3.3.12-3ubuntu1
11:56:34 status unpacked procps:amd64 2:3.3.12-3ubuntu1提前感谢:)
托马斯
页面原文内容由Stack Overflow提供。腾讯云小微IT领域专用引擎提供翻译支持
原文链接：
https://stackoverflow.com/questions/52480626
复制相关文章
相似问题