Regarding replacing characters in log file

rajaniyer123 · 04-11-2008, 07:24 AM

Hi

As I have one log files of approx. 50,000 lines of same format i whcih I want to replace the line format as per given details

Existing Line

"10.49.6.64" "NULL-AUTH-USER" "01/Feb/2008:00:17:42 -0800" "GET /soap/v2008/Authentication?wsdl HTTP/1.1" 200 9567

Required Line

10.49.6.64 "NULL-AUTH-USER" [01/Feb/2008:00:17:42 -0800] "GET /soap/v2008/Authentication?wsdl HTTP/1.1" 200 9567

The brief summary is

1. In first field I want to removee double quotes of IP Address
2. In third field I want to replace the double quote with square brackets.

Can anybody give me command to do the same.

Thanks
Rajan

colucix · 04-11-2008, 07:36 AM

Given the string you've posted, I assume the "third field" is actually the "third and fourth fields". Then you can use awk to replace double quotes in the relevant fields:

Code:

gawk '{gsub("\"","",$1); gsub("\"","[",$3); gsub("\"","]",$4); print}' logfile

This does not modify the file in place, but you have to redirect the output to another file and eventually overwrite the original one.

berbae · 04-11-2008, 07:59 AM

Code:

awk '{print gensub("\"","","g",$1) " " $2 " " gensub("^\"","[","g",$3) " " gensub("\"$","]","g",$4) " " $5 " " $6 " " $7 " " $8 " " $9}' logfilename

Edit : congratulations to colucix faster and better solution than me

colucix · 04-11-2008, 08:13 AM

Quote:

Originally Posted by berbae

Edit : congratulations to colucix faster and better solution than me

Thanks

Just a note, berbae: when using print in awk you can separate fields with a comma (instead to explicitly put a blank space). In this way the default output field separator (that is a blank space) is used.

rajaniyer123 · 04-12-2008, 10:32 AM

Hi

Thanks to all

It works for me.

Thanks
Rajan