Login or Register to Ask a Question and Join Our Community

Sponsored Content
Full Discussion: Filter records from a log file based on timestamp
Top Forums UNIX for Beginners Questions & Answers Filter records from a log file based on timestamp Post 303043487 by Chubler_XL on Wednesday 29th of January 2020 03:32:57 PM
Old 01-29-2020
That looks like a good approach.

You could get some more efficiency by not calling the date external on each input line and using bash to convert the date time to an mmddHHMMSS number for direct comparison like this:

Code:
#!/bin/bash
function convdtime {
    w="JanFebMarAprMayJunJulAugSepOctNovDec"
    t=${w%%$1*}
    printf -v when "%d%02d%02d%02d%02d\n"  $((${#t}/3 + 1)) $2 ${3//:/ }
}

convdtime Jan 19 21:15:00
start=$when

while read mth day time rest
do
   convdtime $mth $day $time
   if [[ $when -le $start ]]
   then
       echo "This event occured before 21:15, inserting into new log file"
       echo "$mth $day $time $rest" >> filter.txt
   else
      break
   fi
done < auth.log

If file is sorted you can save processing additional lines by using break instead of continue once you are past the target datetime.

Edit: This will have issues around end of calendar year where Dec 31 will appear to be greater than Jan 1
Last edited by Chubler_XL; 01-29-2020 at 04:39 PM..
This User Gave Thanks to Chubler_XL For This Post:
mukulverma2408
 

10 More Discussions You Might Find Interesting

1. UNIX for Advanced & Expert Users

Copy lines from a log file based on timestamp

how to copy lines from a log file based on timestamp. INFO (RbrProcessFlifoEventSessionEJB.java:processFlight:274) - E_20080521_110754_967: rbrAciInfoObjects listing complete! INFO (RbrPnrProcessEventSessionEJB.java:processFlight:197) - Event Seq: 1647575217; Carrier: UA; Flt#: 0106; Origin:... (1 Reply)
Discussion started by: ranjiadmin
1 Replies

2. Shell Programming and Scripting

List all log records logged after $timestamp ?

I am trying to find a way to list every records inside a file (usually a log file) that are present after a record mathing/greater-then a timestamp supplied by another script. The timestamp can be anywhere inside the record and it is usually in the standard `date` format (will not look for other... (5 Replies)
Discussion started by: Browser_ice
5 Replies

3. Shell Programming and Scripting

filter out all the records which are having space in the 8th filed of my file

I have a file which is having fileds separtaed by delimiter. Ex: C;4498;qwa;cghy;;;;40;;222122 C;4498;sample;city;;;;34 2;;222123 C;4498;qwe;xcbv;;;;34-2;;222124 C;4498;jj;sffz;;;;41;;222120 C;4498;eert;qwq;;;;34 A;;222125 C;4498;jj;szxzzd;;;;34;;222127 out of these records I... (3 Replies)
Discussion started by: indusri
3 Replies

4. Shell Programming and Scripting

Filter records in a file using AWK

I want to filter records in one of my file using AWK command (or anyother command). I am using the below code awk -F@ '$1=="0003"&&"$2==20100402" print {$0}' $INPUT > $OUTPUT I want to pass the 0003 and 20100402 values through a variable. How can I do this? Any help is much... (1 Reply)
Discussion started by: gpaulose
1 Replies

5. Shell Programming and Scripting

Delete log file entries based on the Date/Timestamp within log file

If a log file is in the following format 28-Jul-10 ::: Log message 28-Jul-10 ::: Log message 29-Jul-10 ::: Log message 30-Jul-10 ::: Log message 31-Jul-10 ::: Log message 31-Jul-10 ::: Log message 1-Aug-10 ::: Log message 1-Aug-10 ::: Log message 2-Aug-10 ::: Log message 2-Aug-10 :::... (3 Replies)
Discussion started by: vikram3.r
3 Replies

6. Shell Programming and Scripting

Need to get all the records from a log file greater than timestamp supplied.

I have a log file which has records with hung thread information/error I need to find out hung thread from log file greater than timestamp supplied. 00000026 ThreadMonitor W WSVR0605W: Thread "WebContainer : 1" (00000027) has been active for 701879 milliseconds and may be hung. There is/are... (6 Replies)
Discussion started by: megh
6 Replies

7. Shell Programming and Scripting

Filter records based on 2nd file

Hello, I want to filter records of a file if they fall in range associated with a second file. First the chr number (2nd col of 1st file and 1st col of 2nd file) needs to be matched. Then if the 3rd col of the first file falls within any of the ranges specified by the 2nd and 3rd cols , then... (4 Replies)
Discussion started by: ritakadm
4 Replies

8. UNIX for Dummies Questions & Answers

Filter records in a huge text file from a filter text file

Hi Folks, I have a text file with lots of rows with duplicates in the first column, i want to filter out records based on filter columns in a different filter text file. bash scripting is what i need. Data.txt Name OrderID Quantity Sam 123 300 Jay 342 498 Kev 78 2500 Sam 420 50 Vic 10... (3 Replies)
Discussion started by: tech_frk
3 Replies

9. Shell Programming and Scripting

Shell script to filter records in a zip file that contains matching columns from another file

Not sure if this is the correct forum for this question. I have two files. file1.zip, file2 Input: file1.zip col1, col2 , col3 a , b , 0:0:0:0:0:c436:9346:d40b x, y, 0:0:0:0:0:880:39f9:c9a7 m, n , 0:0:0:0:0:80c7:9161:fe00 file2.txt col1 c4:36:93:46:d4:0b... (1 Reply)
Discussion started by: anil.v
1 Replies

10. Shell Programming and Scripting

Awk/sed/cut to filter out records from a file based on criteria

I have two files and would need to filter out records based on certain criteria, these column are of variable lengths, but the lengths are uniform throughout all the records of the file. I have shown a sample of three records below. Line 1-9 is the item number "0227546_1" in the case of the first... (15 Replies)
Discussion started by: MIA651
15 Replies

LEARN ABOUT REDHAT

rotatelogs

rotatelogs(8)						      System Manager's Manual						     rotatelogs(8)

NAME

       rotatelogs - rotate Apache logs without having to kill the server

SYNOPSIS

       rotatelogs logfile rotationtime [offset]

DESCRIPTION

       rotatelogs is a simple program for use in conjunction with Apache's piped logfile feature, which can be used like this:

       CustomLog "|bin/rotatelogs /var/logs/logfile 86400" common

       This  creates  the files /var/logs/logfile.nnnn where nnnn is the system time at which the log nominally starts (this time will always be a
       multiple of the rotation time, so you can synchronize cron scripts with it).  At the end of each rotation time (here after 24 hours) a  new
       log is started.

OPTIONS

       logfile
	      The  path plus basename of the logfile.  If logfile includes any Otherwise, the suffix .nnnnnnnnnn is automatically added and is the
	      time in seconds.	Both formats compute the start time from the beginning of the current period.

       rotationtime
	      The rotation time in seconds.

       offset The number of minutes offset from UTC.  If omitted, zero is assumed and UTC is used.  For example, to use local time in the zone UTC
	      -5 hours, specify a value of -300 for this argument.

PORTABILITY

       The  following logfile format string substitutions should be supported by all strftime(3) implementations, see the strftime(3) man page for
       library-specific extensions.

       %A     full weekday name (localized)

       %a     3-character weekday name (localized)

       %B     full month name (localized)

       %b     3-character month name (localized)

       %c     date and time (localized)

       %d     2-digit day of month

       %H     2-digit hour (24 hour clock)

       %I     2-digit hour (12 hour clock)

       %j     3-digit day of year

       %M     2-digit minute

       %m     2-digit month

       %p     am/pm of 12 hour clock (localized)

       %S     2-digit second

       %U     2-digit week of year (Sunday first day of week)

       %W     2-digit week of year (Monday first day of week)

       %w     1-digit weekday (Sunday first day of week)

       %X     time (localized)

       %x     date (localized)

       %Y     4-digit year

       %y     2-digit year

       %Z     time zone name

       %%     literal `%'

SEE ALSO

       httpd(8)

								    March 2001							     rotatelogs(8)
All times are GMT -4. The time now is 08:11 PM.
Unix & Linux Forums Content Copyright 1993-2022. All Rights Reserved.
Privacy Policy