Tools to break apart large log files.

[Lennart Sorensen]

On Wed, Dec 09, 2009 at 10:22:37PM -0500, Scott Sullivan wrote:
> The log files have a time stamp at the front of each line, like this:
>
> [2009/12/09 19:10]  UserA: Text
> [2009/12/09 19:11]  UserB: Responce
> [2009/12/09 19:11]  UserB: More Text
> [2009/12/09 19:11]  UserA: ??? Profit
>
> I want something that will register when the gap between the time stamps  
> is greater then a given value and split them out to separate files.

Sounds like a job for perl.

Of course given the standard 'mark' that syslog tends to do (great idea
too), there probably won't ever be 2 hours between messages.

-- 
Len Sorensen
--
The Toronto Linux Users Group.      Meetings: http://gtalug.org/
TLUG requests: Linux topics, No HTML, wrap text below 80 columns
How to UNSUBSCRIBE: http://gtalug.org/wiki/Mailing_lists