Log parsing

Buhlz_I · 02-14-2015, 12:00 PM

Hi, I'm trying to use awk to parse multiple strings from a fw log file

I need awk to parse for the following structure: 3 IPs in an OR sequence AND string1 AND string2 (IP or IP or IP) && string1 && string2

I'm unable to craft a command that looks for IP 1, 2, or 3 and string 1 or string 2. Below is some of the syntax structure I've tried so far but to no avail. I believe the OR statement is incorrect as the AND arguments appear to be working

cat file |awk /IP/ || /IP/ || /IP/ && /string1/ && /string2/

millgates · 02-14-2015, 12:26 PM

Hi,
in your post you have parentheses but in the actual command there are none. Since && has higher precedence than ||, it actually translates to

Code:

cat file |awk /IP/ || /IP/ || (/IP/ && /string1/ && /string2/)

also, you don't need the cat command, awk will accept an input file as an argument.