Hej alla,

Jag måste skriva ett script som kommer att agera vid produktion formaterade enligt följande exempel:

AFP: state \u003d "DRIFT"
AFP: usersArray: _array_index: 0: disconnectID \u003d 0
AFP: usersArray: _array_index: 0: sessionid \u003d 3423
AFP: usersArray: _array_index: 0: minsToDisconnect \u003d 0
AFP: usersArray: _array_index: 0: flags \u003d 0
AFP: usersArray: _array_index: 0: skick \u003d 6
AFP: usersArray: _array_index: 0: loginElapsedTime \u003d 89731
AFP: usersArray: _array_index: 0: name \u003d "maryallen"
AFP: usersArray: _array_index: 0: lastUseElapsedTime \u003d 89725
AFP: usersArray: _array_index: 0: serviceType \u003d "AFP"
AFP: usersArray: _array_index: 0: sessionType \u003d "tcp"
AFP: usersArray: _array_index: 0: Ipaddress \u003d "10.0.3.36"
AFP: usersArray: _array_index: 1: disconnectID \u003d 0
AFP: usersArray: _array_index: 1: sessionid \u003d 3573
AFP: usersArray: _array_index: 1: minsToDisconnect \u003d 0
AFP: usersArray: _array_index: 1: flags \u003d 0
AFP: usersArray: _array_index: 1: state \u003d 6
AFP: usersArray: _array_index: 1: loginElapsedTime \u003d 72783
AFP: usersArray: _array_index: 1: name \u003d "ILS"
AFP: usersArray: _array_index: 1: lastUseElapsedTime \u003d 68964
AFP: usersArray: _array_index: 1: serviceType \u003d "AFP"
AFP: usersArray: _array_index: 1: sessionType \u003d "tcp"
AFP: usersArray: _array_index: 1: Ipaddress \u003d "10.0.3.136"
AFP: usersArray: _array_index: 2: disconnectID \u003d 0
AFP: usersArray: _array_index: 2: sessionid \u003d 3609
AFP: usersArray: _array_index: 2: minsToDisconnect \u003d 0
AFP: usersArray: _array_index: 2: flags \u003d 0
AFP: usersArray: _array_index: 2: state \u003d 1
AFP: usersArray: _array_index: 2: loginElapsedTime \u003d 69026
AFP: usersArray: _array_index: 2: name \u003d "samanthacovey"
AFP: usersArray: _array_index: 2: lastUseElapsedTime \u003d 36404
AFP: usersArray: _array_index: 2: serviceType \u003d "AFP"
AFP: usersArray: _array_index: 2: sessionType \u003d "tcp"
AFP: usersArray: _array_index: 2: Ipaddress \u003d "10.0.3.36"
AFP: usersArray: _array_index: 3: disconnectID \u003d 0
AFP: usersArray: _array_index: 3: sessionid \u003d 3664
AFP: usersArray: _array_index: 3: minsToDisconnect \u003d 0
AFP: usersArray: _array_index: 3: flags \u003d 0
AFP: usersArray: _array_index: 3: state \u003d 1
AFP: usersArray: _array_index: 3: loginElapsedTime \u003d 5745
AFP: usersArray: _array_index: 3: name \u003d "dawndawson"
AFP: usersArray: _array_index: 3: lastUseElapsedTime \u003d 1
AFP: usersArray: _array_index: 3: serviceType \u003d "AFP"
AFP: usersArray: _array_index: 3: sessionType \u003d "tcp"
AFP: usersArray: _array_index: 3: Ipaddress \u003d "10.0.3.56"
AFP: usersArray: _array_index: 4: disconnectID \u003d 0
AFP: usersArray: _array_index: 4: sessionid \u003d 3666
AFP: usersArray: _array_index: 4: minsToDisconnect \u003d 0
AFP: usersArray: _array_index: 4: flags \u003d 0
AFP: usersArray: _array_index: 4: skick \u003d 1
AFP: usersArray: _array_index: 4: loginElapsedTime \u003d 5743
AFP: usersArray: _array_index: 4: name \u003d "dawndawson"
AFP: usersArray: _array_index: 4: lastUseElapsedTime \u003d 519
AFP: usersArray: _array_index: 4: serviceType \u003d "AFP"
AFP: usersArray: _array_index: 4: sessionType \u003d "tcp"
AFP: usersArray: _array_index: 4: Ipaddress \u003d "10.0.3.56"
AFP: usersArray: _array_index: 5: disconnectID \u003d 0
AFP: usersArray: _array_index: 5: sessionid \u003d 3698
AFP: usersArray: _array_index: 5: minsToDisconnect \u003d 0
AFP: usersArray: _array_index: 5: flags \u003d 0
AFP: usersArray: _array_index: 5: state \u003d 1
AFP: usersArray: _array_index: 5: loginElapsedTime \u003d 2276
AFP: usersArray: _array_index: 5: name \u003d "kateberrigan"
AFP: usersArray: _array_index: 5: lastUseElapsedTime \u003d 0
AFP: usersArray: _array_index: 5: serviceType \u003d "AFP"
AFP: usersArray: _array_index: 5: sessionType \u003d "tcp"
AFP: usersArray: _array_index: 5: Ipaddress \u003d "10.0.3.33"
AFP: usersArray: _array_index: 6: disconnectID \u003d 0
AFP: usersArray: _array_index: 6: sessionid \u003d 3700
AFP: usersArray: _array_index: 6: minsToDisconnect \u003d 0
AFP: usersArray: _array_index: 6: flags \u003d 0
AFP: usersArray: _array_index: 6: skick \u003d 1
AFP: usersArray: _array_index: 6: loginElapsedTime \u003d 2273
AFP: usersArray: _array_index: 6: name \u003d "kateberrigan"
AFP: usersArray: _array_index: 6: lastUseElapsedTime \u003d 1604
AFP: usersArray: _array_index: 6: serviceType \u003d "AFP"
AFP: usersArray: _array_index: 6: sessionType \u003d "tcp"
AFP: usersArray: _array_index: 6: Ipaddress \u003d "10.0.3.33"
AFP: usersArray: _array_index: 7: disconnectID \u003d 0
AFP: usersArray: _array_index: 7: sessionid \u003d 3705
AFP: usersArray: _array_index: 7: minsToDisconnect \u003d 0
AFP: usersArray: _array_index: 7: flags \u003d 1
AFP: usersArray: _array_index: 7: Statligt \u003d 1
AFP: usersArray: _array_index: 7: loginElapsedTime \u003d 607
AFP: usersArray: _array_index: 7: name \u003d "sabrinaschwartz"
AFP: usersArray: _array_index: 7: lastUseElapsedTime \u003d 1
AFP: usersArray: _array_index: 7: serviceType \u003d "AFP"
AFP: usersArray: _array_index: 7: sessionType \u003d "tcp"
AFP: usersArray: _array_index: 7: Ipaddress \u003d "10.0.3.28"
AFP: usersArray: _array_index: 8: disconnectID \u003d 0
AFP: usersArray: _array_index: 8: sessionid \u003d 3707
AFP: usersArray: _array_index: 8: minsToDisconnect \u003d 0
AFP: usersArray: _array_index: 8: flags \u003d 1
AFP: usersArray: _array_index: 8: skick \u003d 1
AFP: usersArray: _array_index: 8: loginElapsedTime \u003d 606
AFP: usersArray: _array_index: 8: name \u003d "sabrinaschwartz"
AFP: usersArray: _array_index: 8: lastUseElapsedTime \u003d 207
AFP: usersArray: _array_index: 8: serviceType \u003d "AFP"
AFP: usersArray: _array_index: 8: sessionType \u003d "tcp"
AFP: usersArray: _array_index: 8: Ipaddress \u003d "10.0.3.28"
AFP: timestamp \u003d "2007-11-21 10:05:40 -0800"

Skriptet behöver:

1. hitta någon linje som slutar med "state \u003d 6"
2. extrahera "array_index:" nummer från den linjen
3. extrahera "sessionid" av att array_index från en annan linje

Detta går utanför min kunskap om grep och awk. Jag skulle använda awk utom jag bara vet hur man agerar på kolumner, och eftersom det inte finns några blanka runt array_index värdet I'm stumped! Kan ni hjälpa till?

Tack!
Noam

något i denna riktning .....
nawk-f noa.awk myFile

noa.awk:

BEGIN {
  FS="( |:|=)"
  FLDidx=4
  FLDname=5
}

{
  if ( $FLDname == "state" && $NF == "6" )
     state6[$FLDidx]
  if ( $FLDname == "sessionID" )
     sessionID[$FLDidx] = $NF
}
END {
  for (i in state6)
    printf("state6 idx->[%d] sessionID->[%d]\n", i, sessionID[i])
}