爲什麼grep在查詢中沒有收到冒號

-1

我嘗試從2月份的定義日期的系統日誌中用冒號找到錯誤。但是在所有情況下grep都沒有運氣：爲什麼grep在查詢中沒有收到冒號

 
%grep "18:18:25" /var/log/messages  # I need Feb 
%grep "*:18:25" /var/log/messages   # I need Feb 
%grep "^*:18:25" /var/log/messages  # I need Feb 
%grep "^.*:18:25" /var/log/messages  # I need Feb 

%grep -e "^.*18:18:25" /var/log/messages # I need Feb 
%grep -e "^.18:18:25" /var/log/messages # I need Feb 
%grep -e "^18:18:25" /var/log/messages # I need Feb 
%grep -e "^Feb.18:18:25" /var/log/messages 
%grep -e "^Feb.:18:25" /var/log/messages 
%grep -e "^Feb.*:18:25" /var/log/messages

可能會存在更健康的程序嗎？

來源

2014-02-14 rezax

我在我的/ var/log/messages上試過了類似的grep，它的grepping很好。 – Raghuram

嘗試過我的本地日誌，它的工作原理。下面是用grep本身，尋找先從二月空間和所需的日期和一個更大的空間的模式/ ^二月日期/（即）行消息日誌

**[[email protected] ~]# cat /var/log/messages** 
Feb 9 03:40:04 applekm kernel: imklog 4.6.2, log source = /proc/kmsg started. 
Feb 9 03:40:04 applekm rsyslogd: [origin software="rsyslogd" swVersion="4.6.2" x-pid="2077" x-info="http://www.rsyslog.com"] (re)start 
Feb 9 03:40:24 applekm rhsmd: This system is registered to RHN Classic 
Feb 10 03:10:03 applekm rhsmd: This system is registered to RHN Classic 
Feb 11 03:14:28 applekm rhsmd: This system is registered to RHN Classic 
Feb 11 11:59:28 applekm abrt[31046]: saved core dump of pid 31032 (/usr/lib/jvm/java-1.6.0-openjdk-1.6.0.0.x86_64/jre/bin/java) to /var/spool/abrt/ccpp-2014-02-11-11:59:27-31032.new/coredump (590483456 bytes) 
Feb 11 11:59:28 applekm abrt[31046]: /var/spool/abrt is 1738308913 bytes (more than 1279 MB), deleting 'ccpp-2014-01-07-20:49:05-7481' 
Feb 12 03:49:07 applekm rhsmd: This system is registered to RHN Classic 
Feb 12 11:32:37 applekm SYMBDSNAP_SDK[1951]: Failed to open device: /dev/symbdsnapctl, errno: 2. 
Feb 12 11:32:37 applekm SYMBDSNAP_SDK[1951]: Failed to open device: /dev/symbdsnapctl, errno: 2. 
Feb 12 11:32:37 applekm SYMBDSNAP_SDK[1951]: Failed to open device: /dev/symbdsnapctl, errno: 2. 
Feb 12 11:32:37 applekm SYMBDSNAP_SDK[1951]: Failed to open device: /dev/symbdsnapctl, errno: 2. 
Feb 12 11:32:37 applekm SYMBDSNAP_SDK[1951]: Failed to open device: /dev/symbdsnapctl, errno: 2. 
Feb 12 11:32:37 applekm SYMBDSNAP_SDK[1951]: Failed to open device: /dev/symbdsnapctl, errno: 2. 
Feb 12 23:16:19 applekm SYMBDSNAP_SDK[1951]: Failed to open device: /dev/symbdsnapctl, errno: 2. 
Feb 12 23:16:19 applekm SYMBDSNAP_SDK[1951]: Failed to open device: /dev/symbdsnapctl, errno: 2. 
Feb 12 23:16:19 applekm SYMBDSNAP_SDK[1951]: Failed to open device: /dev/symbdsnapctl, errno: 2. 
Feb 12 23:16:19 applekm SYMBDSNAP_SDK[1951]: Failed to open device: /dev/symbdsnapctl, errno: 2. 
Feb 12 23:16:19 applekm SYMBDSNAP_SDK[1951]: Failed to open device: /dev/symbdsnapctl, errno: 2. 
Feb 12 23:16:19 applekm SYMBDSNAP_SDK[1951]: Failed to open device: /dev/symbdsnapctl, errno: 2. 
Feb 13 03:44:47 applekm rhsmd: This system is registered to RHN Classic 
Feb 13 12:10:01 applekm auditd[2050]: Audit daemon rotating log files 
Feb 13 23:22:48 applekm SYMBDSNAP_SDK[1951]: Failed to open device: /dev/symbdsnapctl, errno: 2. 
Feb 13 23:22:48 applekm SYMBDSNAP_SDK[1951]: Failed to open device: /dev/symbdsnapctl, errno: 2. 
Feb 13 23:22:48 applekm SYMBDSNAP_SDK[1951]: Failed to open device: /dev/symbdsnapctl, errno: 2. 
Feb 13 23:22:48 applekm SYMBDSNAP_SDK[1951]: Failed to open device: /dev/symbdsnapctl, errno: 2. 
Feb 13 23:22:49 applekm SYMBDSNAP_SDK[1951]: Failed to open device: /dev/symbdsnapctl, errno: 2. 
Feb 13 23:22:49 applekm SYMBDSNAP_SDK[1951]: Failed to open device: /dev/symbdsnapctl, errno: 2. 
Feb 14 03:14:18 applekm rhsmd: This system is registered to RHN Classic

。

[[email protected] ~]# grep "^Feb 13 " /var/log/messages 
Feb 13 03:44:47 applekm rhsmd: This system is registered to RHN Classic 
Feb 13 12:10:01 applekm auditd[2050]: Audit daemon rotating log files 
Feb 13 23:22:48 applekm SYMBDSNAP_SDK[1951]: Failed to open device: /dev/symbdsnapctl, errno: 2. 
Feb 13 23:22:48 applekm SYMBDSNAP_SDK[1951]: Failed to open device: /dev/symbdsnapctl, errno: 2. 
Feb 13 23:22:48 applekm SYMBDSNAP_SDK[1951]: Failed to open device: /dev/symbdsnapctl, errno: 2. 
Feb 13 23:22:48 applekm SYMBDSNAP_SDK[1951]: Failed to open device: /dev/symbdsnapctl, errno: 2. 
Feb 13 23:22:49 applekm SYMBDSNAP_SDK[1951]: Failed to open device: /dev/symbdsnapctl, errno: 2. 
Feb 13 23:22:49 applekm SYMBDSNAP_SDK[1951]: Failed to open device: /dev/symbdsnapctl, errno: 2. 
[[email protected] ~]# 
[[email protected] ~]# 
[[email protected] ~]# grep "^Feb 14 " /var/log/messages 
Feb 14 03:14:18 applekm rhsmd: This system is registered to RHN Classic 
[[email protected] ~]#

希望有所幫助。

來源

2014-02-14 08:58:44 Fidel

我需要找到與具體日期分隔：冒號因爲在2月13日我有成千上萬的消息到10分鐘例如：2月13日18時80分25秒 – rezax

對不起，我不能完全得到上述背景。如果你想獲得特定日期和時間的列表，請使用所有參數。 ** grep「^ Feb 13 18:80:25」/ var/log/messages ** – Fidel

也無法工作 – rezax

爲什麼grep在查詢中沒有收到冒號

回答

相關問題