Truncating a string

nkendrick · 11-28-2003, 03:49 PM

Folks, still getting my head around sed, awk and cut etc..

I'm running logresolve on my apache access logs but I would like the screen output to only display the resolved domain name and timestamp, so how would I pipe the output into one of the above filters (or something else?) to, for example, truncate lines like the following before the first double quote:

somedomainname - - [28/Nov/2003:20:39:08 +0000] "GET /images/1px.gif HTTP/1.1" 304

Thanks

david_ross · 11-28-2003, 03:59 PM

What about:
IFS="
"
for i in `cat /path/to/log`;do echo $i | cut -f1 -d\";done

nkendrick · 11-28-2003, 04:18 PM

That does the trick thank you very much for the quick reply - I ended up with the following because I'm looking for instances of a specific request to track accesses to a specific page:

IFS="
"
for i in `cat /var/log/httpd/access*`;do echo $i | grep 1px.gif | cut -f1 -d\";done

nkendrick · 11-28-2003, 04:34 PM

..er..actually...can we get logresolve in somewhere, so IP addresses are resolved in the output?

Thanks

NK

nkendrick · 11-28-2003, 05:11 PM

Well, my learning curve has got me to the following- - can it be made more elegant?

IFS="
"
rm -f tmplog.tmp
for i in `cat /var/log/httpd/access*`;do echo $i | grep 1px.gif >> tmplog.tmp; done
logresolve < tmplog.tmp | cut -f1 -d\"
rm -f tmplog.tmp

david_ross · 11-29-2003, 09:12 AM

You could use:
IFS="
"
for i in `logresolve < /path/to/log`;do echo $i | grep 1px.gif | cut -d\" -f1; done