Login or Register to Ask a Question and Join Our Community

Sponsored Content
Full Discussion: Is there a BASH script allowing me to grep specifics from /var/log/messages?
Top Forums Shell Programming and Scripting Is there a BASH script allowing me to grep specifics from /var/log/messages? Post 302994891 by Don Cragun on Wednesday 29th of March 2017 08:23:31 AM
Old 03-29-2017
No. The bottom lines in the Corona688's post were the output produced by running the script he provided with an input file named logentryfile containing the sample data you showed us in post #4. If you want to parameterize his suggestion and read data from standard input (instead of from a file named logentryfile), change your script to something like:
Code:
#!/bin/bash
IAm=${0##*/}
if [ $# -ne 2 ]
then	printf 'Usage: %s start end
	where start and end are starting and ending dates and times in the format
		"MM DD hh:mm:ss"
	representing the start and end times to be selected from the logfile found
	on standard input.
'	"$IAm" >&2
	exit 1
fi
awk -v FIRST="$1" -v LAST="$2"  '
BEGIN {
	split("Jan Feb Mar Apr May Jun Jul Aug Sep Oct Nov Dec", A); # A[1]=Jan, etc
	for(X in A) A[A[X]]=sprintf("%02d",X) # Convert A[1]=Jan to A[Jan]=01
}
{	$1=A[$1]
	$2=sprintf("%02d", $2)
} # Substitute two digit months and days into first two fields
($0 >= FIRST) && ($0 <= LAST) # Select and print entries in range.'

When you invoke this script, give it two quoted operands containing your desired start and end dates and times and pipe the logfile you want it to process into it or, if the data is in a file, redirect the input to the script from that file.
This User Gave Thanks to Don Cragun For This Post:
vgplayer54
 

10 More Discussions You Might Find Interesting

1. Solaris

diff b/w /var/log/syslog and /var/adm/messages

hi sirs can u tell the difference between /var/log/syslogs and /var/adm/messages in my working place i am having two servers. in one servers messages file is empty and syslog file is going on increasing.. and in another servers message file is going on increasing but syslog file is... (2 Replies)
Discussion started by: tv.praveenkumar
2 Replies

2. UNIX for Advanced & Expert Users

/var/adm/messages vs /var/log/messages

The /var/adm/messages in Solaris seem to log more system messages/errors compared to /var/log/messages in Linux. I checked the log level in Linux and they seem OK. Is there any other log file that contains the messages or is it just that Linux doesn't log great many things? (2 Replies)
Discussion started by: gomes1333
2 Replies

3. Solaris

Difference between /var/log/syslog and /var/adm/messages

Hi, Is the contents in /var/log/syslog and /var/adm/messages are same?? Regards (3 Replies)
Discussion started by: vks47
3 Replies

4. Shell Programming and Scripting

How can view log messages between two time frame from /var/log/message or any type of log files

How can view log messages between two time frame from /var/log/message or any type of log files. when logfiles are very big and especially many messages with in few minutes, I would like to display log messages between 5 minute interval. Could you pls give me the command? (1 Reply)
Discussion started by: johnveslin
1 Replies

5. UNIX for Dummies Questions & Answers

/etc/sudoers for allowing oracle user to /var/log/messages

So I want the DBA to access /var/log/messages and so I logged in as root and then edited the sudoers file as follows "oracle ALL= (root) /bin/view, /var/log/messages" However when I login as oracle and try "sudo more /var/log/messages" I get Sorry, user oracle is not allowed to... (1 Reply)
Discussion started by: gubbu
1 Replies

6. UNIX for Dummies Questions & Answers

fprintd messages in /var/log/messages

Whenever a user uses su I get the following error messages in /var/log/messages: Nov 23 04:24:55 <REMOVED> abrt: saved core dump of pid 26141 (/usr/libexec/fprintd) to /var/spool/abrt/ccpp-1322018695-26141.new/coredump (753664 bytes) Nov 23 04:24:55 <REMOVED> abrtd: Directory... (3 Replies)
Discussion started by: JakesHat
3 Replies

7. Shell Programming and Scripting

Script to monitor /var/log/messages

Hello All, I want to write a script to monitor my product logs from /var/log/messages and send notifications without using "tail -f" command.Please suggest alternatives and any other tools for monitoring and alerting. Thank You (1 Reply)
Discussion started by: Cva2568
1 Replies

8. Shell Programming and Scripting

Log all the commands input by user at real time in /var/log/messages

Below is my script to log all the command input by any user to /var/log/messages. But I cant achieve the desired output that i want. PLease see below. function log2syslog { declare COMMAND COMMAND=$(fc -ln -0) logger -p local1.notice -t bash -i -- "$USER:$COMMAND" } trap... (12 Replies)
Discussion started by: invinzin21
12 Replies

9. Shell Programming and Scripting

Transfer the logs being thrown into /var/log/messages into another file example /var/log/volumelog

I have been searching and reading about syslog. I would like to know how to Transfer the logs being thrown into /var/log/messages into another file example /var/log/volumelog. tail -f /var/log/messages dblogger: msg_to_dbrow: no logtype using missing dblogger: msg_to_dbrow_str: val ==... (2 Replies)
Discussion started by: kenshinhimura
2 Replies

10. Shell Programming and Scripting

[bash] script is filling up my /var/log

I am trying to create a script that checks if my VPN connection is up and running... Everything seems to work as except but for some reason, the script fills up my /var/log/auth.log with the below information Dec 13 01:07:44 debian sudo: soichiro : TTY=pts/0 ; PWD=/home/soichiro/Desktop ;... (5 Replies)
Discussion started by: soichiro
5 Replies

LEARN ABOUT MOJAVE

datetime::locale::en5.18

DateTime::Locale::en(3) 				User Contributed Perl Documentation				   DateTime::Locale::en(3)

NAME

       DateTime::Locale::en

SYNOPSIS

	 use DateTime;

	 my $dt = DateTime->now( locale => 'en' );
	 print $dt->month_name();

DESCRIPTION

       This is the DateTime locale package for English.

DATA

       This locale inherits from the DateTime::Locale::root locale.

       It contains the following data.

   Days
       Wide (format)

	 Monday
	 Tuesday
	 Wednesday
	 Thursday
	 Friday
	 Saturday
	 Sunday

       Abbreviated (format)

	 Mon
	 Tue
	 Wed
	 Thu
	 Fri
	 Sat
	 Sun

       Narrow (format)

	 M
	 T
	 W
	 T
	 F
	 S
	 S

       Wide (stand-alone)

	 Monday
	 Tuesday
	 Wednesday
	 Thursday
	 Friday
	 Saturday
	 Sunday

       Abbreviated (stand-alone)

	 Mon
	 Tue
	 Wed
	 Thu
	 Fri
	 Sat
	 Sun

       Narrow (stand-alone)

	 M
	 T
	 W
	 T
	 F
	 S
	 S

   Months
       Wide (format)

	 January
	 February
	 March
	 April
	 May
	 June
	 July
	 August
	 September
	 October
	 November
	 December

       Abbreviated (format)

	 Jan
	 Feb
	 Mar
	 Apr
	 May
	 Jun
	 Jul
	 Aug
	 Sep
	 Oct
	 Nov
	 Dec

       Narrow (format)

	 J
	 F
	 M
	 A
	 M
	 J
	 J
	 A
	 S
	 O
	 N
	 D

       Wide (stand-alone)

	 January
	 February
	 March
	 April
	 May
	 June
	 July
	 August
	 September
	 October
	 November
	 December

       Abbreviated (stand-alone)

	 Jan
	 Feb
	 Mar
	 Apr
	 May
	 Jun
	 Jul
	 Aug
	 Sep
	 Oct
	 Nov
	 Dec

       Narrow (stand-alone)

	 J
	 F
	 M
	 A
	 M
	 J
	 J
	 A
	 S
	 O
	 N
	 D

   Quarters
       Wide (format)

	 1st quarter
	 2nd quarter
	 3rd quarter
	 4th quarter

       Abbreviated (format)

	 Q1
	 Q2
	 Q3
	 Q4

       Narrow (format)

	 1
	 2
	 3
	 4

       Wide (stand-alone)

	 1st quarter
	 2nd quarter
	 3rd quarter
	 4th quarter

       Abbreviated (stand-alone)

	 Q1
	 Q2
	 Q3
	 Q4

       Narrow (stand-alone)

	 1
	 2
	 3
	 4

   Eras
       Wide

	 Before Christ
	 Anno Domini

       Abbreviated

	 BC
	 AD

       Narrow

	 B
	 A

   Date Formats
       Full

	  2008-02-05T18:30:30 = Tuesday, February 5, 2008
	  1995-12-22T09:05:02 = Friday, December 22, 1995
	 -0010-09-15T04:44:23 = Saturday, September 15, -10

       Long

	  2008-02-05T18:30:30 = February 5, 2008
	  1995-12-22T09:05:02 = December 22, 1995
	 -0010-09-15T04:44:23 = September 15, -10

       Medium

	  2008-02-05T18:30:30 = Feb 5, 2008
	  1995-12-22T09:05:02 = Dec 22, 1995
	 -0010-09-15T04:44:23 = Sep 15, -10

       Short

	  2008-02-05T18:30:30 = 2/5/08
	  1995-12-22T09:05:02 = 12/22/95
	 -0010-09-15T04:44:23 = 9/15/-10

       Default

	  2008-02-05T18:30:30 = Feb 5, 2008
	  1995-12-22T09:05:02 = Dec 22, 1995
	 -0010-09-15T04:44:23 = Sep 15, -10

   Time Formats
       Full

	  2008-02-05T18:30:30 = 6:30:30 PM UTC
	  1995-12-22T09:05:02 = 9:05:02 AM UTC
	 -0010-09-15T04:44:23 = 4:44:23 AM UTC

       Long

	  2008-02-05T18:30:30 = 6:30:30 PM UTC
	  1995-12-22T09:05:02 = 9:05:02 AM UTC
	 -0010-09-15T04:44:23 = 4:44:23 AM UTC

       Medium

	  2008-02-05T18:30:30 = 6:30:30 PM
	  1995-12-22T09:05:02 = 9:05:02 AM
	 -0010-09-15T04:44:23 = 4:44:23 AM

       Short

	  2008-02-05T18:30:30 = 6:30 PM
	  1995-12-22T09:05:02 = 9:05 AM
	 -0010-09-15T04:44:23 = 4:44 AM

       Default

	  2008-02-05T18:30:30 = 6:30:30 PM
	  1995-12-22T09:05:02 = 9:05:02 AM
	 -0010-09-15T04:44:23 = 4:44:23 AM

   Datetime Formats
       Full

	  2008-02-05T18:30:30 = Tuesday, February 5, 2008 6:30:30 PM UTC
	  1995-12-22T09:05:02 = Friday, December 22, 1995 9:05:02 AM UTC
	 -0010-09-15T04:44:23 = Saturday, September 15, -10 4:44:23 AM UTC

       Long

	  2008-02-05T18:30:30 = February 5, 2008 6:30:30 PM UTC
	  1995-12-22T09:05:02 = December 22, 1995 9:05:02 AM UTC
	 -0010-09-15T04:44:23 = September 15, -10 4:44:23 AM UTC

       Medium

	  2008-02-05T18:30:30 = Feb 5, 2008 6:30:30 PM
	  1995-12-22T09:05:02 = Dec 22, 1995 9:05:02 AM
	 -0010-09-15T04:44:23 = Sep 15, -10 4:44:23 AM

       Short

	  2008-02-05T18:30:30 = 2/5/08 6:30 PM
	  1995-12-22T09:05:02 = 12/22/95 9:05 AM
	 -0010-09-15T04:44:23 = 9/15/-10 4:44 AM

       Default

	  2008-02-05T18:30:30 = Feb 5, 2008 6:30:30 PM
	  1995-12-22T09:05:02 = Dec 22, 1995 9:05:02 AM
	 -0010-09-15T04:44:23 = Sep 15, -10 4:44:23 AM

   Available Formats
       d (d)

	  2008-02-05T18:30:30 = 5
	  1995-12-22T09:05:02 = 22
	 -0010-09-15T04:44:23 = 15

       EEEd (d EEE)

	  2008-02-05T18:30:30 = 5 Tue
	  1995-12-22T09:05:02 = 22 Fri
	 -0010-09-15T04:44:23 = 15 Sat

       Hm (H:mm)

	  2008-02-05T18:30:30 = 18:30
	  1995-12-22T09:05:02 = 9:05
	 -0010-09-15T04:44:23 = 4:44

       hm (h:mm a)

	  2008-02-05T18:30:30 = 6:30 PM
	  1995-12-22T09:05:02 = 9:05 AM
	 -0010-09-15T04:44:23 = 4:44 AM

       Hms (H:mm:ss)

	  2008-02-05T18:30:30 = 18:30:30
	  1995-12-22T09:05:02 = 9:05:02
	 -0010-09-15T04:44:23 = 4:44:23

       hms (h:mm:ss a)

	  2008-02-05T18:30:30 = 6:30:30 PM
	  1995-12-22T09:05:02 = 9:05:02 AM
	 -0010-09-15T04:44:23 = 4:44:23 AM

       M (L)

	  2008-02-05T18:30:30 = 2
	  1995-12-22T09:05:02 = 12
	 -0010-09-15T04:44:23 = 9

       Md (M/d)

	  2008-02-05T18:30:30 = 2/5
	  1995-12-22T09:05:02 = 12/22
	 -0010-09-15T04:44:23 = 9/15

       MEd (E, M/d)

	  2008-02-05T18:30:30 = Tue, 2/5
	  1995-12-22T09:05:02 = Fri, 12/22
	 -0010-09-15T04:44:23 = Sat, 9/15

       MMM (LLL)

	  2008-02-05T18:30:30 = Feb
	  1995-12-22T09:05:02 = Dec
	 -0010-09-15T04:44:23 = Sep

       MMMd (MMM d)

	  2008-02-05T18:30:30 = Feb 5
	  1995-12-22T09:05:02 = Dec 22
	 -0010-09-15T04:44:23 = Sep 15

       MMMEd (E, MMM d)

	  2008-02-05T18:30:30 = Tue, Feb 5
	  1995-12-22T09:05:02 = Fri, Dec 22
	 -0010-09-15T04:44:23 = Sat, Sep 15

       MMMMd (MMMM d)

	  2008-02-05T18:30:30 = February 5
	  1995-12-22T09:05:02 = December 22
	 -0010-09-15T04:44:23 = September 15

       MMMMEd (E, MMMM d)

	  2008-02-05T18:30:30 = Tue, February 5
	  1995-12-22T09:05:02 = Fri, December 22
	 -0010-09-15T04:44:23 = Sat, September 15

       ms (mm:ss)

	  2008-02-05T18:30:30 = 30:30
	  1995-12-22T09:05:02 = 05:02
	 -0010-09-15T04:44:23 = 44:23

       y (y)

	  2008-02-05T18:30:30 = 2008
	  1995-12-22T09:05:02 = 1995
	 -0010-09-15T04:44:23 = -10

       yM (M/yyyy)

	  2008-02-05T18:30:30 = 2/2008
	  1995-12-22T09:05:02 = 12/1995
	 -0010-09-15T04:44:23 = 9/-010

       yMEd (EEE, M/d/yyyy)

	  2008-02-05T18:30:30 = Tue, 2/5/2008
	  1995-12-22T09:05:02 = Fri, 12/22/1995
	 -0010-09-15T04:44:23 = Sat, 9/15/-010

       yMMM (MMM y)

	  2008-02-05T18:30:30 = Feb 2008
	  1995-12-22T09:05:02 = Dec 1995
	 -0010-09-15T04:44:23 = Sep -10

       yMMMEd (EEE, MMM d, y)

	  2008-02-05T18:30:30 = Tue, Feb 5, 2008
	  1995-12-22T09:05:02 = Fri, Dec 22, 1995
	 -0010-09-15T04:44:23 = Sat, Sep 15, -10

       yMMMM (MMMM y)

	  2008-02-05T18:30:30 = February 2008
	  1995-12-22T09:05:02 = December 1995
	 -0010-09-15T04:44:23 = September -10

       yQ (Q yyyy)

	  2008-02-05T18:30:30 = 1 2008
	  1995-12-22T09:05:02 = 4 1995
	 -0010-09-15T04:44:23 = 3 -010

       yQQQ (QQQ y)

	  2008-02-05T18:30:30 = Q1 2008
	  1995-12-22T09:05:02 = Q4 1995
	 -0010-09-15T04:44:23 = Q3 -10

   Miscellaneous
       Prefers 24 hour time?

       No

       Local first day of the week

       Monday

SUPPORT

       See DateTime::Locale.

AUTHOR

       Dave Rolsky <autarch@urth.org>

COPYRIGHT

       Copyright (c) 2008 David Rolsky. All rights reserved. This program is free software; you can redistribute it and/or modify it under the
       same terms as Perl itself.

       This module was generated from data provided by the CLDR project, see the LICENSE.cldr in this distribution for details on the CLDR data's
       license.

perl v5.18.2							    2017-10-06						   DateTime::Locale::en(3)
All times are GMT -4. The time now is 09:21 AM.
Unix & Linux Forums Content Copyright 1993-2022. All Rights Reserved.
Privacy Policy