I replied directly to Eric earlier this week, but this is something relatively easy to accomplish with SEC at <a href="http://simple-evcorr.sourceforge.net/">http://simple-evcorr.sourceforge.net/</a><br><br>By configuring a stanza with a simple * regex and a timer, you can keep resetting the timer every time a new log entry comes in.<br>
<br>--Patrick<br><br><div class="gmail_quote">On Sun, Apr 17, 2011 at 5:07 PM, Eric Smith <span dir="ltr"><<a href="mailto:esmithphoto@gmail.com">esmithphoto@gmail.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin: 0pt 0pt 0pt 0.8ex; border-left: 1px solid rgb(204, 204, 204); padding-left: 1ex;">
I occasionally have to dig through logs of various kinds... tomcat,<br>
apache, java programs (log4j),....<br>
<br>
And I've wondered if I should write this tool, or maybe it exists.<br>
Is there something that will tell me when there are gaps in a log<br>
file? I would specify the format of the date/time info, then specify<br>
how big a gap I want to know about, and it would scan, ripping out the<br>
date/time & do the date math and when it got a big enough time gap<br>
between messages it would tell me.<br>
<br>
Maybe it would print the line number the gap started on and the start<br>
and stop date. Pipe a grep into this command and it could be a really<br>
powerful way to gain some insight into my logs.<br>
<br>
I keep being surprised by the tools available in unix.... ggrep with<br>
-A and -B (awesome), I almost wrote xargs years ago until someone told<br>
me about it, ....<br>
Maybe this one already exists and my google-fu isn't strong enough to find it.<br>
<br>
I could write it in perl myself, but I'd rather not if I don't have to. :)<br>
<br>
Any thoughts?<br>
<br>
Eric<br>
<br>
_______________________________________________<br>
bblisa mailing list<br>
<a href="mailto:bblisa@bblisa.org">bblisa@bblisa.org</a><br>
<a href="http://www.bblisa.org/mailman/listinfo/bblisa" target="_blank">http://www.bblisa.org/mailman/listinfo/bblisa</a><br>
</blockquote></div><br>