[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [multitail] regex help

René Berber a écrit :
Laurent TAUPIAC wrote:

i would like to filter some entries from apache log.

i want to display
- all lines that match "client" like

    * /[Thu Nov 09 08:53:11 2006] [error] [client] PHP
      Notice:  Undefined variable: toto in
      /sg2/instdev2/htdocs/V4/_FO_/lta.old/bench/test.php on line 7/

- all lines that don't match "client" like

    * /[Thu Nov 09 08:53:11 2006] [notice] child pid 13313 exit signal
      Segmentation fault (11)/

I try several methods but without any success

such one regexp that should do both thing (match IP or line with this
format "[date][level] message")
multitail -Em "(108.243|108.226)|^(\[.+?\]\s){2}(?!\[)" errors.log
Parameter m is incorrectly used.

What is your objective?  First you say you want to match lines with "client"
(and all that don't match "client", nice contradiction, in other words: match
all lines) then your regex is trying to match a couple of IP addresses (you just
forgot to escape the dot).

In old doc, m was optionnal for E, meaning matching versus v for avoid.
Anyway, without m, same result.
I may be not clear on what i want.
I want all line with one or two particular IP (the line that follow the format [client IP.IP.IP.IP] ) and all generique line not affected by an IP (those lines does not have entry such [client IP.IP.IP.IP]
There is no contradiction.
in following sample i wan't only 2 first

[Wed Nov 15 13:22:46 2006] [error] [client] PHP Notice:  Undefined variable: toto in /sg2/instdev2/htdocs/V4/_FO_/lta.old/bench/test.php on line 7
[Wed Nov 15 13:22:47 2006] [notice] child pid 22968 exit signal Segmentation fault (11)
[Wed Nov 15 13:22:46 2006] [error] [client] PHP Notice:  Undefined variable: foo in /sg2/instdev2/htdocs/V4/_FO_/foo.php on line 20

As i said before, I check this regex in tools like regexCoach or regexBuddy. It is valid and match what i want.
I found that multitail compile the regex with look ahead assertion if i escape the question mark like \? , but it still dont work anyway.


Sorry, This disclamer is auto added by FW's company

Si vous n'etes pas destinataires de ce message, merci d'avertir l'expediteur de l'erreur de distribution et de le detruire immediatement.
Ce message contient des informations confidentielles ou appartenant a La Francaise des Jeux. Il est etabli a l'intention exclusive de ses destinataires. Toute divulgation, utilisation, diffusion ou reproduction (totale ou partielle) de ce message ou des informations qu'il contient, doit etre prealablement autorisee.
Tout message electronique est susceptible d'alteration et son integrite ne peut etre assuree. La Francaise des Jeux decline toute responsabilite au titre de ce message s'il a ete modifie ou falsifie.

If you are not the intended recipient of this e-mail, please notify the sender of the wrong delivery and delete it immediately from your system.
This e-mail contains confidential information or information belonging to La Francaise des Jeux and is intended solely for the addressees. The unauthorised disclosure, use, dissemination or copying (either whole or partial) of this e-mail, or any information it contains, is prohibited.
E-mails are susceptible to alteration and their integrity cannot be guaranteed. La Francaise des Jeux shall not be liable for this e-mail if modified or falsified.