nixCraft

Hello All,

I am new to awk

I have a logfile name "app.log" with the following contnets
All i have to do is check if the first field is time (14:3....) if so remove it and print the rest
-------------------------------------------------------------------------------------------------------------
14:32:07.331 ERROR set User Value fail, xx Field is not exist:IMEI
14:32:10.607 ERROR Cannot cancel cache update - current state (2) is not UPDATE_IN_PROGRESS
java.lang.IllegalStateException: Cannot cancel cache update - current state (2) is not UPDATE_IN_PROGRESS

xx_application error id=2030 Other errors

14:35:07.331 ERROR set User Value fail, xx Field is not exist:IMEI
14:35:10.607 ERROR Cannot cancel cache update - current state (2) is not UPDATE_IN_PROGRESS
-------------------------------------------------------------------------------------------------------------


I have written an awk script named "log_filter.awk" as given below
-------------------------------------------------------------------------------------------------------------
BEGIN {
if ( $1 ~ /[a-z]/ ) {print $0
} else {
print $2, $3, $4, $5, $6, $7, $8
}
}
-------------------------------------------------------------------------------------------------------------

Now when i run the command
awk -f log_filter.awk app.log

I am not getting any output
All i have to do is check if the first field is time (14:3....) if so remove it and print the rest

Also If i remove the BEGIN Statement i get the below given output
Should the awk script be always be enclosed within "BEGIN {}" Statement ?????
-------------------------------------------------------------------------------------------------------------
awk: log_filter.awk:4: WB
awk: log_filter.awk:4: ^ syntax error
-------------------------------------------------------------------------------------------------------------

Any Help would be appreciated
Regards
George

Does it need to be awk?

If not why not try this:


Not sure if this is what you are after. And if you need it be be piped to a file you can use:


HTH,

jaysunn

__________________
Have a look at what I have been working on
http://www.shellasaurus.com

@OP, $1 would not have a value if you put it in BEGIN{} block.

__________________
Python tutorial | PHP manual | Bash Ref | Perl documentation | Awk Examples | Gawk | File Renamer

you might want to give a ^ to signify the start of the line.

__________________
Python tutorial | PHP manual | Bash Ref | Perl documentation | Awk Examples | Gawk | File Renamer

Hi jaysunn,

Thanks for the reply, But as you can see from your result
It has completely omitted the line with "14:3"
All I want to do is cut the first field (only time part), if it has numeric value
I want to see the entire log file as it is, I just want to remove the time field (if present)

------------------------------
Thanks for the help
but as you can see from my query above
if i do not put the Begin quote, it gives me a syntax error as shown below
--------------------------------------------
awk: log_filter.awk:4: WB
awk: log_filter.awk:4: ^ syntax error
--------------------------------------------

Maybe this:

I am sure there a much neater ways of achieving this. Hopefully this is what you want.

Jaysunn

__________________
Have a look at what I have been working on
http://www.shellasaurus.com

Thanks
I had come up with a similar thing
awk -F " " '$1 ~ /^[1-9]/ { print $2 $3 $4 $5 $6 $7 $8 $9 $10 $11 $12 $13 }' test_1.log

However the problem with this is that, here it omits the line that do not start with the time-field
As you can see even for your command it has omitted the below given line
--------------------------
java.lang.IllegalStateException: Cannot cancel cache update - current state (2) is not UPDATE_IN_PROGRESS
xx_application error id=2030 Other errors
--------------------------

I want all line to be printed, just want to remove the time field (which is the first field) (if present)
This is exactly the reason why i had to write a script with an "if " clause in it.

Dear All

I finally figured out the problem
for some reason you just need to add an extra "{" & "}" in the awk script
As of now the updated script is as given below

--------------------------------------------------------------------
{
if ($1 ~/[a-z]/)
{
print $0
}
else
{
print $2 " " $3 " " $4 " " $5 " " $6 " " $7 " " $8 " " $9 " " $10 " " $11 " " $12 " " $13 " " $14
}
}
--------------------------------------------------------------------

Now simply call this 'script" and "file-name" on which operation is to be performed with "awk" command and you will find the desired output
The Second print statement will remove the un-necessary "Time-Stamp" field