Shell Programming and Scripting

Hi Gurus,

I have XML log files which is continuously updated with resultmessage succesful and which are not successful. My intention is to grep the <resultMessage> which does not contain following success message and put it in a file.

<resultCode>0</resultCode>
<resultMessage>Successful</resultMessage>
<resultMessage>The operation was successful!</resultMessage>

Here is one example of unsuccessful message:

<resultCode>39021</resultCode>
<resultMessage>Inventory subsystem is null.</resultMessage>


I also would like to grep the 2nd line after the <resultMessage>. And i need to input the Timestemp including day/min/second

Realtime Searching (may be using tail command) for following resultmessage which doesn't containg successful message:

<resultCode>39021</resultCode>
<resultMessage>Inventory subsystem is null.</resultMessage>
</ResultOfOperationReply>
</createNewInventoryResponse>

An print and output to a file as following:

2011-06-21 13:54:15 <resultMessage>Inventory subsystem is null.</resultMessage>
</createNewInventoryResponse>

check whether this prints the line or not

Code:

 
tail -f logfile | nawk ' /resultMessage/ { $0 !~ /successful/ {print $0;getline;getline;print $0 }}'

Can you post few more sample lines of xml log file..?

2011-06-21 13:54:15.313 | DEBUG | OSS | 1308654113778628004 | [-INTF-]com.oss.webservice.ecare.services.Boss4ECareInterfaceServiceSkeleton.createNewInventoryResponse
<ResultOfOperationReply>
<resultCode>39021</resultCode>
<resultMessage>The RUIM card information obtained from the Inventory subsystem is null.</resultMessage>
</ResultOfOperationReply>
</createNewInventoryResponse>

Code:

 
tail -f logfile | nawk '/resultMessage/ && $0 !~ /Successful/ {print $0;getline;getline;print $0}'

---------- Post updated at 03:47 PM ---------- Previous update was at 03:46 PM ----------

if you use gawk, then you can prnit the time using the systime or strftime function

some tips if grep supports -A & -B option

Code:

tail -f <file name>> |grep -B1 -A2

grep -B1 can be used to get the time stamp from the logs (as displyed abpve) and -A2 to get the 2nd line after the unsucessful resultMessage

above one also output successful resultmessage. But I want to exclude it<resultMessage>Successful</resultMessage>