Linux log parsing troubles

tmcurry

Greetings,

I am a newbie to the Solarwinds scripting way.

I have a logfile that has a line like this:

result:2:App Abort commands issued in the past 5 minutes 25

The : is a deliminator

result is the keyword was used in our former monitoring tool

The number 2 which can be 0|1|2 is the number that will deterring the severity

anything after the last : is what the customer wants to see in the alert message.

Thank you in advanced.

thulsey

What language are you using for the script? Most languages have a method to split a string (such as the entire line of the log file) by a specific character (the colon, in your case). This will split it into an array (in this example, we'll call it $resultArray).

$resultArray now has 3 elements:
$resultArray[0] will have the string "result"

$resultArray[1] will have the string "2"

$resultArray[2] will have the string "App Abort commands issued in the past 5 minutes 25"

Alternatively, most scripting languages see strings as an array of characters, so by capturing the entire line as a string (we'll use $entireLine as an example), you can just select exactly what you want, ignoring all delimiters.

$entireLine[0] = "r"
$entireLine[3] = "u"
$entireLine[7] = "2"     <---- that's the severity code, since it is the 8th character in the string
$entireLine[9..($entireLine.count)] = The rest of the line