Well I've solved my first problem and filtered out the month I needed just by Grepping it but now I need to convert the data back so calamaris can read it back..
#! /usr/bin/perl -p s/^\d+\.\d+/localtime $&/e; Did a great job but I can't read it 100% to convert it back.. the translation looks like: "decimal + . + decimal" convert to "localtime" no sure what the $& is so it's messing up my convert back... s/^localtime/d+\.\d+/e; <---??? AARGHH!!??? somebody good at this??? many thanks... thanks, George Vieira Systems Manager Citadel Computer Systems P/L http://www.citadelcomputer.com.au -----Original Message----- From: Simon Bryan [mailto:[EMAIL PROTECTED]] Sent: Friday, 01 March 2002 7:32 AM To: George Vieira; Slug Subject: RE: [SLUG] Squid Logs You can set the squid.conf file to use htpd style logs which show it in human readable time. However there are many log analysers that will do this for you, I use SARG as my main analyser. Of course you could also just rotate your logs monthly, I do mine daily. If the problem is for existing logs then the entries are in calendar order so you should be able to at worst manually rip out a months worth of entries. > -----Original Message----- > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of > Chris Barnes > Sent: Friday, 1 March 2002 12:51 AM > To: 'SLUG' > Subject: RE: [SLUG] Squid Logs > > > This is just a guess, but can you tell squid to log dates in a different > format in the config file? If so you might be in luck. > > -- > > -----Original Message----- > From: George Vieira [mailto:[EMAIL PROTECTED]] > Sent: Thursday, 28 February 2002 3:42 PM > To: Sydney Linux Users Group (E-mail) > Subject: [SLUG] Squid Logs > > Hi all, > > Does anybody know how to read the dates from the access.log file from > squid.. > I need to get calamaris to read only the lines for a particular month and > not the whole file, doing a vi of the file shows integer dates.. > > 1008047100.732 25 192.168.0.1 TCP_MISS/304 82 GET > http://www.yellowpages.com.au > > Any ideas? > > thanks, > George Vieira > Systems Manager > Citadel Computer Systems P/L > http://www.citadelcomputer.com.au > > -- > SLUG - Sydney Linux User Group Mailing List - http://slug.org.au/ > More Info: http://lists.slug.org.au/listinfo/slug > > Searching for "A Better Way" to a home loan ?. Call RAMS on 13 > 7267, or go to http://www.rams.com.au > > The e-mail and any attachments may contain confidential > information. If you receive it in error you must not use or > disclose the information. You must tell us and delete it. We do > not waive any legal privilege by sending it. RAMS does not > promise that the email is free from virus defect or error. > -- > SLUG - Sydney Linux User Group Mailing List - http://slug.org.au/ > More Info: http://lists.slug.org.au/listinfo/slug -- SLUG - Sydney Linux User Group Mailing List - http://slug.org.au/ More Info: http://lists.slug.org.au/listinfo/slug
