Shell Programming and Scripting

i have several lines in a file that looks like this:

Code:

2013-03-23 19:02:33,122 DiscoverManager [Discover-15] WeblogicApplication-10.111.112.119-7400 FAILURE

i'm monitoring this file for strings that contain FAILURE. but i've been getting a lot of alerts that just aren't actionable. so i need another way around this.

each line has an IP and a port number, which is what i bolded above. i'm wondering, is there a way to do something like this:

my problem is, there isn't a list of known IPs or ports. any IP can be thrown in the file. so i'm curious if what i'm thinking is possible? i'm guessing awk can be used for this?

i was using a variation of this command to get a count:

Code:

awk '/FAILURE/ && /FAILURE/ {++c}c>=10 -1{o=$0 RS $0 RS $0; print o; c=0}' file

and i was using this to show me the actual offending lines from the file:

Code:

awk '/FAILURE/ && /FAILURE/' file