how to cat a log starting FROM a date TO a date

graziano1968 · 03-20-2007, 10:28 AM

Hello

I have a maillog like this

Mar-15-07 07:49:58 82.235.17.23 <ltcrosby@mailreader.com>..blah
Mar-15-07 07:52:50 82.235.17.23 <ltcrosby@mailreader.com>..blah
...
Mar-20-07 01:52:50 82.235.17.23 <ltcrosby@mailreader.com>..blah

Suppose I wish to "cat" grep or tail (from command line) only
lines from Mar-15-07 07:49:58 to (Mar-15-07 07:49:58)+28 hours.
How can I do that ?

Suppose I want seach the value "delayed rejected" in the interval
Mar-15-07 07:49:58 to (Mar-15-07 07:49:58)+28 hours .

How can I do this search from command line ?

Thanks

(I need this to check email rejected from my greylisting filter in 28 hours.)

Thanks

macemoneta · 03-20-2007, 05:26 PM

You can do something like this, making it as specific as you want:

Code:

grep -e "^Mar 1[56] " /var/log/maillog* | grep "delayed rejected" | less

syg00 · 03-20-2007, 07:24 PM

Use sed - search over the last few days, there was a thread that covered this almost exactly.

graziano1968 · 03-21-2007, 06:14 AM

Quote:

Originally Posted by syg00

Use sed - search over the last few days, there was a thread that covered this almost exactly.

I am searching the post but I cannot find it

I am really lost using sed .
Suppose I want sed from Mar-15-07 07:52:50 to Mar-16-07 07:52:50
for "delayed" , how to do that please ?

Thanks

nx5000 · 03-21-2007, 06:34 AM

Code:

sed -n -e '/Mar-15/,/Mar-16/p' /var/log/maillog | grep delayed

It's possible to do it only with sed but I don't manage...

http://sed.sourceforge.net/

edit:

okay I found it, it's another form:

Code:

sed -n -e '/Mar-15/,/Mar-16/ {/delayed/p}' /var/log/maillog

fooks · 03-21-2007, 07:51 AM

cool, this is exactly i was looking also !
thnx a lot

syg00 · 03-21-2007, 08:27 AM

Yeah, thanks nx5000 - must admit I am happy to pipe through grep. I find it easier to remember to syntax.
Lots of good people with good ideas happy to contribute here on LQ.

nx5000 · 03-21-2007, 08:49 AM

Quote:

Originally Posted by syg00

Yeah, thanks nx5000 - must admit I am happy to pipe through grep. I find it easier to remember to syntax.
Lots of good people with good ideas happy to contribute here on LQ.

I discover things while helping people and then I can just bookmark to my own threads.
LQ is my second hard disk

Thanks Jeremy