按照时间段查询日志文件

Posted 2020-09-26 edgedance

源日志文件:user_register1.log

2017-07-04 02:45:20,1009_10131009201707040245135462341,1,864331035121676,112.28.165.54 2017-07-04 02:49:16,1043_10131043201707040249157342004,1,862490034832444,218.18.37.15 2017-07-04 07:00:37,104502_1013104502201707011551218700323,2,BB834F9C-324F-433F-977E-ED5B0710617E,124.160.212.185 2017-07-04 07:42:16,1043_10131043201707040742164055160,1,865217038064238,183.92.156.244 2017-07-04 09:47:17,1006_10131006201707040947064478188,1,862966032112855,110.80.39.6 2017-07-04 10:13:14,1043_10131043201704231033038174247,1,869818026778147,183.43.152.251 2017-07-04 11:12:59,104502_1013104502201705311746202873014,2,2952D53D-DA26-458F-836A-6BF705BD94A5,115.211.93.133 2017-07-04 11:43:11,1043_10131043201707032319085133204,1,860267039297829,123.185.210.37 2017-07-04 12:23:42,1006_10131006201707041223315633900,1,862245038285951,171.37.106.98 2017-07-04 13:40:19,1002_10131002201706181038289242664,1,866550023931378,106.4.130.141 2017-07-04 13:43:05,1001_10131001201701181559000483337,1,3de8413f-0bc1-44,61.148.243.231 2017-07-04 14:07:08,1012_10131012201612100007286054192,1,863756025661755,125.124.82.11 2017-07-04 14:22:04,1009_10131009201707041421429806855,1,864087033329618,113.12.12.40 2017-07-04 14:26:40,1001_10131001201707011345022284762,1,868904025065586,182.90.219.39 2017-07-04 14:40:56,1006_10131006201701181113302045814,1,863546032974022,182.84.212.202

第一行是时间,例如.我只看2017-07-04 10:00:00 到2017-07-04 12:00:00 点的日志

[root@centos]# awk -F="," ‘ BEGIN{OFS=","}{if($1>="2017-07-04 10:00:00" && $1<="2017-07-04 12:00:00"){print}}‘ user_register1.log 2017-07-04 10:13:14,1043_10131043201704231033038174247,1,869818026778147,183.43.152.251 2017-07-04 11:12:59,104502_1013104502201705311746202873014,2,2952D53D-DA26-458F-836A-6BF705BD94A5,115.211.93.133 2017-07-04 11:43:11,1043_10131043201707032319085133204,1,860267039297829,123.185.210.37

-F="," 源文件按照 逗号 分割

BEGIN{OFS=","} 显示文件按照什么分割,默认是空格

null