06-14-2011
Your requirements are not clear...how do you search the file using the magic no. or the timestamp and what if the very first record in the file is 45768 because you cant go backwards then. State the problem conditions clearly and you might get help...and post what you have done to work on this.
10 More Discussions You Might Find Interesting
1. UNIX for Dummies Questions & Answers
Hi,
Sounds a simple request but I also need (would like) to gather the seconds too. I'm not even sure if this is held. I would think it is, somewhere??!!?!
I belive that stat would/could work but I don't do C (we'll not yet).
Is there any comamnd line util I can use?
SunOS.
Cheers... (7 Replies)
Discussion started by: nhatch
7 Replies
2. UNIX for Dummies Questions & Answers
Hi Everyone,
I want to delete some files in a path based on the time stamp of the file that is i want to delete the file once in a month.
Can any one help me on this?
Thanks in advance (2 Replies)
Discussion started by: samudha
2 Replies
3. UNIX for Dummies Questions & Answers
Hi All,
I know the timestamp of a file. Now i would like to list all the files in the with the same time stamp in the same file.
Any help would be appreciated.
Thanks.
sunny (1 Reply)
Discussion started by: sunny_03
1 Replies
4. Shell Programming and Scripting
Hello. I'm not nearly good enough with awk/perl to create the logfile scraping script that my boss is insisting we need immediately. Here is a brief 3-line excerpt from the access.log file in question (actual URL domain changed to 'aaa.com'):
209.253.130.36 - - "GET... (2 Replies)
Discussion started by: kevinmccallum
2 Replies
5. Shell Programming and Scripting
Hi All,
Cany any one help me in solving this..
Problem statement: I have a requirement to find the time from which there are no files created in a given directory. For this I am assuming that I need to get the file creation time in seconds, then the current time in seconds using `date +%s`.... (7 Replies)
Discussion started by: chary
7 Replies
6. Fedora
Hi all,
I've already tired to try to solved this problem. Also search in Internet didn't find anything solution
I have a directory like this :
# pwd
/opt/projects/juventini
# ls -al | more
total 3627460
drwxr-xr-x 2 app apps 12472320 Sep 24 14:59 .
drwxr-xr-x 11 app apps 4096 Jun... (8 Replies)
Discussion started by: sunardo
8 Replies
7. Shell Programming and Scripting
Hi All,
PFB is a requirement. I am new to shell scripting. So plz help. It would be highly appreciated.
1. choose all the log files based on a particular date (files location is '/test/domain')--i.e,we should choose all the files that are modified on 29th November, neither 28th nor 30th
2.... (3 Replies)
Discussion started by: skdas_niladri
3 Replies
8. Shell Programming and Scripting
Hi All,
I am facing small problem.
i want to print file time stamp on which date file has placed in the server.
i have given some code but its not giving the year.
any help appreciated.
regards
rajesh. (4 Replies)
Discussion started by: rajesh_pola
4 Replies
9. UNIX for Dummies Questions & Answers
Below is the sample logfile:
Userids Date Time
acb Checkout time: 2013-11-20 17:00
axy Checkout time: 2013-11-22 12:00
der Checkout time: 2013-11-17 17:00
xyz Checkout time: 2013-11-19 16:00
ddd Checkout time: 2013-11-21 16:00
aaa Checkout... (9 Replies)
Discussion started by: asjaiswal
9 Replies
10. Shell Programming and Scripting
find /app/data -name "Availability" -
Below is the output now i need to filter based on latest modified timestamp.
I know 3 is the latest modified time stamp but i tried different options but only filtering docs and not on headnote..Can any one tell me how to do that..
... (2 Replies)
Discussion started by: vkiyv05
2 Replies
LEARN ABOUT DEBIAN
ausearch_add_timestamp_item
AUSEARCH_ADD_TIMESTAMP_ITEM(3) Linux Audit API AUSEARCH_ADD_TIMESTAMP_ITEM(3)
NAME
ausearch_add_timestamp_item - build up search rule
SYNOPSIS
#include <auparse.h>
int ausearch_add_timestamp_item(auparse_state_t *au, const char *op, time_t sec, unsigned milli, ausearch_rule_t how)
DESCRIPTION
ausearch_add_timestamp_item adds an event time condition to the current audit search expression. The search conditions can then be used to
scan logs, files, or buffers for something of interest. The op parameter specifies the desired comparison. Legal op values are <, <=, >=, >
and =. The left operand of the comparison operator is the timestamp of the examined event, the right operand is specified by the sec and
milli parameters.
The how value determines how this search condition will affect the existing search expression if one is already defined. The possible val-
ues are:
AUSEARCH_RULE_CLEAR
Clear the current search expression, if any, and use only this search condition.
AUSEARCH_RULE_OR
If a search expression E is already configured, replace it by (E || this_search_condition).
AUSEARCH_RULE_AND
If a search expression E is already configured, replace it by (E && this_search_condition).
RETURN VALUE
Returns -1 if an error occurs; otherwise, 0 for success.
APPLICATION USAGE
Use ausearch_add_item(3) and ausearch_add_interpreted_item(3) to add conditions that check audit record fields. Use ausearch_add_expres-
sion(3) to add complex search expressions using a single function call.
SEE ALSO
ausearch_add_expression(3), ausearch_add_item(3), ausearch_add_interpreted_item(3), ausearch_add_regex(3), ausearch_set_stop(3), ause-
arch_clear(3), ausearch_next_event(3), ausearch-expression(5).
AUTHOR
Miloslav Trmac
Red Hat Nov 2007 AUSEARCH_ADD_TIMESTAMP_ITEM(3)