的JavaScript在GAWK命令

我試圖瞭解這個gawk的命令一些javascript：的JavaScript在GAWK命令

gawk 'function getip(rec) { 
    n=split(rec,a,"\""); 
    split(a[n-1],ip,","); 
    return ip[1] 
} 
$10 ~ /302/ && $6 ~ /POST/ && $7 ~ /^\/sso\/[pl]fe\/(rs|ui)\/login/ { 
    lfe_user_ip=getip($0); 
    user_path[lfe_user_ip]=user_path[lfe_user_ip]"_login-302" 
}   
/\/sso\/pfe\/rs\/profile\/customer/ && $6 ~ /PUT/ { 
    pfe_user_ip=getip($0); 
    if (user_path[pfe_user_ip] ~ /_login-302/) { 
     if ($10 ~ /200/) successful_redirect_conversion+=1; 
     else failed_redirect_conversion+=1; 
    } 
} END { 
    print successful_redirect_conversion, failed_redirect_conversion 
}'

分析日誌線可以像這樣關於awk上面可以是這樣的：

[09/Oct/2017:02:21:39 -0400] 10.222.11.23 10.222.11.23 - GET /sso/lfe/ui/login http-bio-8000-exec-27 5000 200 49929 24 ?templateId=https%253A%2F%2Fwww.cargive.ca%2Fservice%2FpostLoginProcessing.a%3Fredirect%3Ddefault%26rememberMe%3D1&sourceUrl=https%3A//www.cargive.ca/service/postLoginProcessing.a?redirect=default&rememberMe=1&authlvl= "unauthenticated" "10.222.11.23, 10.222.11.23,10.222.11.23"

困惑在JavaScript分割方法和user_path變量

來源

2017-10-11 OakvilleWork

我試圖瞭解這個GAWKç一些javascript ommand：

沒有JavaScript的，在這個腳本，它的純AWK

gawk '        # call gawk, by default awk default field separator is single space. 
function getip(rec) { 

    # rec -> string 
    # a -> array 
    # "\"" -> separator 
    # split string rec into pieces, where separator being quote 
    # and store in array a, 
    # varibale n will hold count of it, 
    # meaning how many elements (in array a) it became after splitting 

    n=split(rec,a,"\""); 

    # a[n-1] -> second last element of an array 
    # ip -> array 
    # , -> being separator 
    # like above it will split string by comma 

    split(a[n-1],ip,","); 

    # return first element of an array ip 
    return ip[1] 
} 

# if 10th field/column contains 302 and 
# 6th contains POST and 
# 7th field starts with regex /sso/[pl]fe/rs|ui/login/ 
# it can be 
# /sso/pfe/rs/login or /sso/lfe/rs/login 
# /sso/pfe/ui/login or /sso/lfe/ui/login 

$10 ~ /302/ && $6 ~ /POST/ && $7 ~ /^\/sso\/[pl]fe\/(rs|ui)\/login/ { 

    # variable lfe_user will have contents returned by getip function 
    # $0 -> current row/record/line 

    lfe_user_ip=getip($0); 

    # user_path -> array 
    # lfe_user_ip -> array key/index 
    # user_path[lfe_user_ip]"_login-302" -> previous content of such key 
    # and new string "_login-302" will be saved in array 
    # infact concatenation with existing values of array 

    user_path[lfe_user_ip]=user_path[lfe_user_ip]"_login-302" 
} 

# if line contains regex 
# /sso/pre/rs/profile/customer and 
# 6th field contains string PUT  

/\/sso\/pfe\/rs\/profile\/customer/ && $6 ~ /PUT/ { 

    # variable pre_user_ip will have contents returned by function 

    pfe_user_ip=getip($0); 

    # if array user_path value, with index being content of pfe_user_ip 
    # contains with /_login-302/ 

    if (user_path[pfe_user_ip] ~ /_login-302/) { 

     # if 10th field contains 200 
     # increment variable successful_redirect_conversion by 1 
     # else increment variable failed_redirect_conversion by 1 

     if ($10 ~ /200/) successful_redirect_conversion+=1; 
     else failed_redirect_conversion+=1; 
    } 
} END { 
    # after reading everything 
    # print variables 
    print successful_redirect_conversion, failed_redirect_conversion 
}'

從你的文件的內容，這裏是awk如何分割線成田，與默認FS，空單。

Field-1 => $1 => [09/Oct/2017:02:21:39 
Field-2 => $2 => -0400] 
Field-3 => $3 => 10.222.11.23 
Field-4 => $4 => 10.222.11.23 
Field-5 => $5 => - 
Field-6 => $6 => GET 
Field-7 => $7 => /sso/lfe/ui/login 
Field-8 => $8 => http-bio-8000-exec-27 
Field-9 => $9 => 5000 
Field-10 => $10 => 200 
Field-11 => $11 => 49929 
Field-12 => $12 => 24 
Field-13 => $13 => ?templateId=https%253A%2F%2Fwww.cargive.ca%2Fservice%2FpostLoginProcessing.a%3Fredirect%3Ddefault%26rememberMe%3D1&sourceUrl=https%3A//www.cargive.ca/service/postLoginProcessing.a?redirect=default&rememberMe=1&authlvl= 
Field-14 => $14 => "unauthenticated" 
Field-15 => $15 => "10.222.11.23, 
Field-16 => $16 => 10.222.11.23,10.222.11.23"

來源

2017-10-11 08:50:34

的JavaScript在GAWK命令

回答

相關問題