码迷,mamicode.com
首页 > 编程语言 > 详细

学习练习程序:根据日期提取日志的python脚本。

时间:2014-07-29 18:20:52      阅读:327      评论:0      收藏:0      [点我收藏+]

标签:python

#!/usr/bin/python
#! *-* coding:utf-8 *-*
#file:Analysis_logs.py
#import os
import string
import re
month={ ‘1‘:‘Jan‘,
        ‘2‘:‘Feb‘,
        ‘3‘:‘Mar‘,
        ‘4‘:‘Apr‘,
        ‘5‘:‘May‘,
        ‘6‘:‘Jun‘,
        ‘7‘:‘Jul‘,
        ‘8‘:‘Aug‘,
        ‘9‘:‘Sep‘,
        ‘10‘:‘Oct‘,
        ‘11‘:‘Nov‘,
        ‘12‘:‘Dec‘}
LogFilePath=r‘/var/log/secure‘
def Check_Ex_log():
        Ex_str=‘Accepted password‘
        f=open(LogFilePath,‘r‘)
        text=f.readlines()
        f.close
        Count_line=0
        outlog=‘‘
        text_lines=len(text)
        print text_lines
        while Count_line < text_lines:
                str_line=text[Count_line]
                if Ex_str in str_line:
                        outlog+=str_line
                Count_line+=1
        f1=open(‘Ex_Mess.log‘,‘w‘)
        f1.write(outlog)
        f1.close
        print ‘完成‘
#Check_Ex_log()
def JieQu_day():
        date=raw_input(‘请输入要截取日志的日期,格式为月份-日期,例:6-1:\n‘)
        Mon=string.split(date,‘-‘)
        test=month.items()
        for i in test:
                if i[0]==Mon[0]:
                        f=open(LogFilePath,‘r‘)
                        text=f.readlines()
                        f.close()
                        Count_line=0
                        text_line=len(text)
                        output=‘‘
                        Time=i[1]+‘ ‘+Mon[1]
                        while Count_line < text_line:
                                str_line=text[Count_line]
                                if Time in str_line:
                                        output+=str_line
                                Count_line+=1
                        outputname=‘message-%s-%s.log‘%(i[1],Mon[1])
                        f=open(outputname,‘w‘)
                        f.write(output)
                        f.close()
                        print ‘完成‘
def JieQu_hour():
        hour=raw_input(‘请输入要截取日志的时间,例:6-24-1,,6-24-10:表示截取6月24日1点-10点的日志:‘)
        Hou=string.split(hour,‘,‘)
        t1=string.split(Hou[0],‘-‘)
        t2=string.split(Hou[1],‘-‘)
        test=month.items()
        for i in test:
                if t1[0]==i[0]:
                        str1=i[1]+‘ ‘+t1[1]+‘ ‘+t1[2]
                        str2=i[1]+‘ ‘+t2[1]+‘ ‘+t2[2]
        #               print str1+‘---------------‘
        #               print str2+‘---------------‘
                        f=open(LogFilePath,‘r‘)
                        text=f.readlines()
                        f.close()
                        text_lines=len(text)
                        start_Count=0
                        for i in text:                          #获取开始行的行号       
                                n=re.match(str1,i)
                                if n != None:
                                        start=start_Count+1
                                        break
                                start_Count+=1
                        end_Count=0
                        end_list=[]
                        for j in text:                          #获取结束行的行号
                                u=re.match(str2,j)
                                if u != None:
                                        end_list.append(end_Count)
                                        break
                                end_Count+=1
                        Count=1
                        output=‘‘
                        while Count <= end_Count:
                                if Count >= start_Count:
                                        output+=text[Count]
                                Count+=1
                        f1=open(hour+‘.log‘,‘w‘)
                        f1.write(output)
                        f1.close()
                        print ‘完成‘
def chose():
        num=raw_input(‘‘‘本脚本是用于日志分析,仅供学习参考;
                         请根据需求选择下列选项:
                        1.截取一段时间内的日志。
                        2.截取一天的日志。
                        3.根据特征码分析日志。
                        ‘‘‘)
        if num==‘2‘:
                JieQu_day()
        elif num==‘3‘:
                Check_Ex_log()
        elif num==‘1‘:
                JieQu_hour()
        else:
                print ‘您的输入不正确或者该功能为开发完成!‘
chose()

脚本中截取一段时间的日志这个功能,如果输入的开始和结束时间在日志里面这两个时间点没生成日志的话,会导致报错。

脚本适用于linux系统message,secure类似的日志文件。

学习练习程序:根据日期提取日志的python脚本。,布布扣,bubuko.com

学习练习程序:根据日期提取日志的python脚本。

标签:python

原文地址:http://277511467.blog.51cto.com/6357527/1532326

(0)
(0)
   
举报
评论 一句话评论(0
登录后才能评论!
© 2014 mamicode.com 版权所有  联系我们:gaon5@hotmail.com
迷上了代码!