Shell Programming and Scripting

Hello! I need some help with grep from various logs we use for monitoring transactions. The logs contain the following information (which is consistent in all of the files):

Code:

 12:28:33.157 EWY  D 1 (tcpip.c:282): tcpip.c: Unable to connect to x.x.x.x on port xxxx. (79) Connection refused
  
 12:28:43.053 MSG  D 1 (eventmngr.cxx:426): Select loop emulation timed out.
12:28:43.053 EWY  D 1 (logging_compat.c:215): tcpip.c: Returning Socket fd 11
  
 12:28:43.054 EWY  D 1 (tcpip.c:282): tcpip.c: Unable to connect to x.x.x.x on port xxxx. (79) Connection refused
  
 12:28:53.947 MSG  D 1 (eventmngr.cxx:426): Select loop emulation timed out.
12:28:53.948 EWY  D 1 (logging_compat.c:215): tcpip.c: Returning Socket fd 11

So I can grep the "connection refused" information which alerts me that something has happened and I currently use the following command: grep -i "Connection Refused" /prodlogs/ew_RX_OUT.log and if the error level = 0, then alert me. But when the issue is resolved the following is then written to the log:

Code:

 12:28:53.948 EWY  I 1 (logging_compat.c:131): We Successfully became a TCP/IP Client
12:28:53.949 EWY  I 1 (logging_compat.c:131): Connected to port : [xxxx] on machine : <x.x.x.x>

So I'm looking to do a couple of things here (because I have hundreds of these logs that I need to keep an eye on):

1) How do I search on just the last "connection refused" or "Successfully became a TCP/IP Client"
2) If the "Successfully became a TCP/IP Client" occurs after the "connection refused", I need to know this because the problem has been resolved.

I have another program to do the actual alerting but either need a command line to do all of this above or I'm guessing that a script will be in order to which I can run which will give me an indication (such as a 0 or 1). Any help would be appreciated and thanks!

-Scott

Code:

grep "connection refused" filename | tail -1
grep "Successfully became a TCP.IP Client" filename | tail -1

To see the lines' position in the file you can use "grep -n" which will give you the line number, you can then see if the last "Successfully" line was after the last "connection refused" line.