Parsing Powerbroker Logs for SysAdmin Changes (SOX) Post: 302212853

Sponsored Content

Top Forums UNIX for Dummies Questions & Answers Parsing Powerbroker Logs for SysAdmin Changes (SOX) Post 302212853 by joeyg on Tuesday 8th of July 2008 02:16:01 PM

07-08-2008

Registered User

Perhaps one thought...

You can grep -v the file to exclude data. For instance --

cat mylogfile | grep -v "routine"
or
cat mylogfile | grep -v "routine" >mylogfile.2

The first example will send the file to stdout (your screen normally) while the second example will direct the output to a new file. In both cases, any lines with the word "routine" would be excluded.
You could try the second approach, and then if you find another keyword to exclude re-do the command but with the next keyword, for example

cat mylogfile.2 | grep -v "ordinary" >mylogfile.3

Be aware of overall filespace, and remember to clean-up when done. Sometimes log files are very large. Perhaps this gives you a start?

joeyg

View Public Profile for joeyg

Find all posts by joeyg

6 More Discussions You Might Find Interesting

1. UNIX for Dummies Questions & Answers

Powerbroker policy file advice needed

I have a requirement to be able to issue selected commands with root privileges but don't have the ability to su to root due to audit requirements dictating that only our UNIX SA's have that feature. I was told that Powerbroker would allow me to run the commands as root but our security people...

2. UNIX for Advanced & Expert Users

sudo & Sox compliance

Hello, I am trying to convince my boss to stop allowing our users to login as root (superuser). Currently our users login to our unix server with their own account, then as needed, they will do an su and put in the root password. This scares me, for a bunch of reasons. Mainly, one is that we...

3. Shell Programming and Scripting

Parsing out the logs and generating report

My file will contain following(log.txt): start testcase: config loading ...... error XXXX ..... end testcase: config loading, result failed start testcase: ping check ..... error ZZZZZ ..... error AAAAA end testcase: Ping check, result failed I am expecting below output. ...

4. Shell Programming and Scripting

Parsing log files, displaying logs between specific dates

Sorry, couldn't really think of a simple subject/title. So, I have a log file, and the dates are displayed like so: 2009-03-05 02:49:44 So the first and second field are the date/time. I can change them into a unix timestamp easily with: date -d "2009-03-05 02:49:44" +%s However,...

5. Shell Programming and Scripting

Help parsing logs maybe with menu and variables?

I would like to parse through some logs looking for things like exception or failed (grep -i failed). Ideal would be if it were in a menu format so someone without unix ability could just choose option 1 2 or 3 etc. If I could pass the hostname to a variable also that would be awesome, so someone...

6. UNIX and Linux Applications

Parsing Tuxedo Logs

Right now I am parsing Tuxedo logs to calculate response times for various services. I was hoping to find a log tool that had support for Tuxedo and would generate drill down html reports. ---------- Post updated at 02:35 PM ---------- Previous update was at 02:33 PM ---------- I just wanted...

LEARN ABOUT HPUX

vxdmpinq

vxdmpinq(1M)															      vxdmpinq(1M)

NAME

       vxdmpinq - display SCSI inquiry data

SYNOPSIS

       /etc/vx/diag.d/vxdmpinq [-cdh] [-e evpd_value] [-p page_code] device_name

DESCRIPTION

       The  vxdmpinq  utility  returns	SCSI  inquiry  data  for  the  specified  raw  disk  device  specified	by its full pathname (for example,
       /dev/rdsk/c0t0d0 or /dev/vx/rdmp/c0t0d0).  The returned vendor and product identification values can be used with the  vxdiskadm,  vxdmpadm
       and vxinstall commands.

OPTIONS

       -c	 Summarizes inquiry data as a colon-separated list on a single line.

       -d	 Returns detailed inquiry data.

       -e evpd_value
		 Specifies  the  value of the enable vital product data (EVPD) bit to be used with the SCSI inquiry command (possible values are 0
		 or 1, default value is 0).

       -h	 Prints a help message on the usage of the command.

       -p page_code
		 Specifies the page code to be used with the SCSI inquiry command (default value is 0). The page code field specifies  which  page
		 of  vial  product  data  should  be  returned if evpd_value is set to 1.  The value of page_code must be set to 0 if the value of
		 evpd_value is set to 0.

SEE ALSO

       vxdiskadm(1M), vxdmpadm(1M), vxinstall(1M)

VxVM 5.0.31.1							    24 Mar 2008 						      vxdmpinq(1M)