Shell Programming and Scripting

Ladles and Jellyspoons,I am trying to use, unsucessfully I might add, awk to strip a large block of information from and audit output.The format resembles the following:-----------------------------------------------------------Event: execveTime: Tue Feb 28 17:02:25 12 GMTPID: 10938PPID: 8706User/Grp: 1234/12(user1/grp1)Groups: 12(grp1)Effective privileges: "BASIC"Permitted privileges: "BASIC"Retained privileges: "BASIC"Audit tag: 0: -1:user1:1029472123 TTY: pts/1Return1: 0Arg 1 (file info): given path = "/path/privrun" inode = 333 device = 64, 0x01839 mode = 010588 owner uid/gid = 1500/120 type = regular fileArg 2 (argument list): arg #1 = "cmd1" arg #2 = "cmd2" arg #3 = "cmd3"Other (fie info): inode = -1-----------------------------------------------------------Event: execveTime: Tue Feb 28 17:02:25 12 GMTI need to extract all of the data between the dashed lines.....(there are no spaces between the lilnes)Any help would be extremely appreciated....Many thanks

I would suggest posting the awk code you used, along with the format of the text (that you've already posted) again, and this time using the code tags to keep it readable.

Let me try again, the formatting was terrible (First time on forum - sorry)

I am trying to use, unsucessfully I might add, awk to strip a large block of information from and audit output.The format resembles the following:

Code:

-----------------------------------------------------------
Event: execve
Time: Tue Feb 28 17:02:25 12 GMT
PID: 10938
PPID: 8706
User/Grp: 1234/12(user1/grp1)
Groups: 12(grp1)
Effective privileges: "BASIC"
Permitted privileges: "BASIC"
Retained privileges: "BASIC"
Audit tag: 0: -1:user1:1029472123
TTY: pts/1
Return1: 0
Arg 1 (file info): 
given path = "/path/privrun" 
inode = 333 
device = 64, 0x01839 
mode = 010588 
owner uid/gid = 1500/120 
type = regular file
Arg 2 (argument list): 
arg #1 = "cmd1" 
arg #2 = "cmd2" 
arg #3 = "cmd3"
Other (fie info): 
inode = -1
-----------------------------------------------------------
Event: execve
Time: Tue Feb 28 17:02:25 12 GMT

I need to extract all of the data between the dashed lines based on the search field of ' arg #2 = "cmd2" ' Note: There are no spaces between the lines.

Any help would be extremely appreciated....

Many thanks

Try:

Code:

awk -F'---*' '{print $2}' infile

OK I saw you reposted in a diffent format. Then it won't work

---------- Post updated at 14:57 ---------- Previous update was at 14:52 ----------

Try:

Code:

awk '/---/{p=!p;next}p' infile