IFS problem?

sebelk · 05-14-2010, 10:53 AM

Hi,

if I issue command

Code:

grep   TLS.*denied /var/log/radius/radius.log

it ouputs:

Thu May 13 19:12:44 2010 : Error: TLS Alert read:fatal:access denied
Thu May 13 19:14:37 2010 : Error: TLS Alert read:fatal:access denied
Thu May 13 19:20:07 2010 : Error: TLS Alert read:fatal:access denied
Thu May 13 19:47:23 2010 : Error: TLS Alert read:fatal:access denied
Fri May 14 08:01:21 2010 : Error: TLS Alert read:fatal:access denied
Fri May 14 10:44:58 2010 : Error: TLS Alert read:fatal:access denied
Fri May 14 11:45:15 2010 : Error: TLS Alert read:fatal:access denied

So I've wrote the following script:

Code:

#! /bin/bash

for i in "$(grep   TLS.*denied /var/log/radius/radius.log| awk -F' : ' '{print $1}')"
   do
      IFS=$(echo -e '\n')

      filedate=$(date -d  $i '+%Y%m%d')
      hourtry=$(date -d $i '+%H%M%s')
      grep  "$hourtry" /var/log/radius/radiusd-DEFAULT-$filedate.log
   done

unset IFS

But I get:

date: invalid date `Wed May 5 15:51:59 2010\nWed May 5 16:10:08 2010\nWed May 5 16:31:44 2010\nWed May 5 17:20:18 2010\nWed May 5 19:07:48 2010\nWed May 5 19:10:10 2010\nWed May 5 19:55:57 2010\nWed May 5 21:51:53 2010\nThu May 6 07:52:29 2010\nThu May 6 07:56:56 2010\nThu May 6 07:59:07 2010\nThu May 6 08:05:14 2010\nThu May 6 08:07:28 2010\nThu May 6 08:08:41 2010\nThu May 6 08:09:15 2010\nThu May 6 08:10:03 2010\nThu May 6 08:10:32 2010\nThu May 6 08:11:52 2010\nThu May 6 08:13:35 2010\nThu May 6 08:20:49 2010\nThu May 6 08:26:44 2010\nThu May 6 09:16:09 2010\nThu May 6 09:18:29 2010\nThu May 6 09:20:58 2010\nThu May 6 09:22:14 2010\nThu May 6 09:55:10 2010\nThu May 6 11:17:21 2010\nThu May 6 12:03:41 2010\nThu May 6 12:04:31 2010\nThu May (...) Fri May 14 08:01:21 2010\nFri May 14 10:44:58 2010\nFri May 14 11:45:15 2010'
grep: /var/log/radius/radiusd-DEFAULT-.log: No such file or directory

(I've shortened the output)

I've tried using IFS=$'\n' but id didn't work either. What am I doing wrong?

Thanks in advance, Greetings

catkin · 05-14-2010, 11:05 AM

The double quotes around $( ) in for i in "$(grep TLS.*denied /var/log/radius/radius.log| awk -F' : ' '{print $1}')" result in a single word instead of several words being the date+time-stamps you want from the TLS messages. Because the date+time-stamps of the TLS messages include spaces it will not work without the double quotes either so the script will need to process the grep output a line at a time, something like this (not tested)

Code:

while read line
do
   date_time=${line%% :*}
   whatever else you want to do
done <<< "$( grep 'TLS.*denied' /var/log/radius/radius.log )"

grail · 05-14-2010, 12:45 PM

Or you could stick with just the awk depending on if the rest of the line is important:

Code:

while read line
do 
    filedate=$(date -d "$line" '+%Y%m%d')
    <other stuff>
done < <(awk -F" : " '{print $1}' log)

sebelk · 05-17-2010, 08:20 AM

Quote:

Originally Posted by catkin

The double quotes around $( ) in for i in "$(grep TLS.*denied /var/log/radius/radius.log| awk -F' : ' '{print $1}')" result in a single word instead of several words being the date+time-stamps you want from the TLS messages. Because the date+time-stamps of the TLS messages include spaces it will not work without the double quotes either so the script will need to process the grep output a line at a time, something like this (not tested)

Code:

while read line
do
   date_time=${line%% :*}
   whatever else you want to do
done <<< "$( grep 'TLS.*denied' /var/log/radius/radius.log )"

That didn't work

"-bash: Wed May 5 15:51:59 2010 : Error: TLS Alert read:fatal:access denied "

and it ends ouputs with:

"Mon May 17 10:07:47 2010 : Error: TLS Alert read:fatal:access denied : File name too long"

sebelk · 05-17-2010, 08:23 AM

Quote:

Originally Posted by grail

Or you could stick with just the awk depending on if the rest of the line is important:

Code:

while read line
do 
    filedate=$(date -d "$line" '+%Y%m%d')
    <other stuff>
done < <(awk -F" : " '{print $1}' log)

Hi, sadly it didn't worked either:

Code:

while read line; do  filedate=$(date -d "$line" '+%Y%m%d'); echo $filedate; done << (awk -F" : " '{print $1}' /var/log/radius/radius.log)
-bash: syntax error near unexpected token `('

catkin · 05-17-2010, 09:11 AM

Quote:

Originally Posted by sebelk

Hi, sadly it didn't worked either:

Code:

while read line; do  filedate=$(date -d "$line" '+%Y%m%d'); echo $filedate; done << (awk -F" : " '{print $1}' /var/log/radius/radius.log)
-bash: syntax error near unexpected token `('

Because you had

Code:

done << (

instead of

Code:

done < <(