evolix/wiki
22
0
Fork 0
Code Releases Activity

access.log

Browse source
This commit is contained in:
pdiogoantunes 2017-04-13 11:30:57 +02:00
parent 052b2f7657
commit 74c5e0d388
1 changed files with 7 additions and 7 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

14
TipsShell.md
View file

@ -235,22 +235,22 @@ tr '\n' ' ' | cut -d':' -f2 | echo -n "$(cat <&0)"; echo = $(groups $user); done
### Compte rendu pour un laps de temps
~~~
# date; (timeout 60 tail -f /var/log/apache2/access.log | cut -d' ' -f1) | sort | uniq -c | sort -n
~~~{.bash}
$ date; (timeout 60 tail -f access.log | cut -d' ' -f1) | sort | uniq -c | sort -n
~~~
### En direct
- Version simple :
~~~
# tail -f /var/log/apache2/access.log | stdbuf -oL cut -d ' ' -f1 | uniq -c
~~~{.bash}
$ tail -f access.log | stdbuf -oL cut -d ' ' -f1 | uniq -c
~~~
- Version couleur :
~~~
# SEUIL=5; tail -f /var/log/apache2/access.log | stdbuf -oL cut -d ' ' -f1 | stdbuf -oL uniq -c | \
~~~{.bash}
$ SEUIL=5; tail -f access.log | stdbuf -oL cut -d ' ' -f1 | stdbuf -oL uniq -c | \
eval "awk '\$1 > $SEUIL {printf \"\\033[1;31m\" \$1 \" \" \$2 \"\\033[0m \\n\"; next;};{printf \$1 \" \" \$2 \"\\n\";}'"
~~~
@ -269,7 +269,7 @@ Si on veut les adresses IPs, ou simplement trier le access.log avant l'analyse,
Et si l'on considère les mots comme une seule différence (et non par caractères), on peut descendre le seuil :
~~~{.bash}
SEUIL=3; i=1; lastline=; cat /var/log/nginx/access.log | sed 's/.*\] \(.*\)\" [0-9]\{3\}.*$/\1\"/' | \
SEUIL=3; i=1; lastline=; cat access.log | sed 's/.*\] \(.*\)\" [0-9]\{3\}.*$/\1\"/' | \
(while read line; do diff=$(cmp -bl <(echo "$lastline") <(echo "$line") 2>/dev/null | awk '{print $1}' | \
(compt=0; lastnumber=0; while read number; do (( lastnumber+1 != number)) && ((compt=compt+1)); lastnumber=$number; done; echo $compt)); \
(( diff < SEUIL )) && { i=$((i+1)); } || { echo "$i $line"; i=1; }; lastline="$line"; done)