Shell Script to parse log and Convert to csv -
i need shell script parse log file , pattern. if paatern found, take key values line , put csv. example: here log file have :
*webauthredirect: mar 24 08:57:50.903: #emweb-6-parse_error: webauth_redirect.c:1034 parser exited. client mac= a0:88:b4:d3:55:8c bytes parsed = 0 , bytes read = 213 *webauthredirect: mar 24 08:57:50.903: #emweb-6-http_req_begin_err: http_parser.c:579 http request should begin character ***ewmwebwebauth1: mar 04 11:33:46.870: #pem-6-guestin: pem_api.c:7851 guest user logged in user account (mrathi_dev) mac address 00:1e:65:39:10:8e, ip address 192.168.133.146.** *ewmwebwebauth1: mar 04 11:33:46.870: #aaa-5-aaa_auth_network_user: aaa.c:2178 authentication succeeded network user 'mrathi_dev' *ewmwebwebauth1: mar 04 11:33:46.858: #apf-6-user_name_created: apf_ms.c:6532 username entry (mrathi_dev) length (10) created mobile 00:1e:65:39:10:8e *mmlisten: mar 24 08:57:49.030: #apf-6-radius_override_disabled: apf_ms_radius_override.c:1085 radius overrides disabled, ignoring source 4 *webauthredirect: mar 24 08:57:47.008: #emweb-6-parse_error: webauth_redirect.c:1034 parser exited. client mac= 5c:a:5b:60:f1:a7 bytes parsed = 0 , bytes read = 440 *webauthredirect: mar 24 08:57:47.008: #emweb-6-http_req_begin_err: http_parser.c:579 http request should begin character *webauthredirect: mar 24 08:57:45.453: #emweb-6-parse_error: webauth_redirect.c:1034 parser exited. client mac= 5c:a:5b:60:f1:a7 bytes parsed = 0 , bytes read = 440 *webauthredirect: mar 24 08:57:45.453: #emweb-6-http_req_begin_err: http_parser.c:579 http request should begin character
all interested in #pem-6-guestin
line. need take user id , mac , ip address line , put in csv. log lines status required.
this first time working shell scripts , appreciated.
i think easier using grep
filter + sed
groups using regex:
grep "#pem-6-guestin" log.txt | sed -r "s/.*user account \((.*)\).* mac address (.*), ip address (.*)\.\*\*.*/\1,\2,\3/"
and output in csv format:
mrathi_dev,00:1e:65:39:10:8e,192.168.133.146
Comments
Post a Comment