主要使用bash 来进行日志分析,一些细节取决于你的日志格式,此处分分析的日志的格式见此
查看日志大小
ls -lh
![notion image](https://www.notion.so/image/https%3A%2F%2Fs3-us-west-2.amazonaws.com%2Fsecure.notion-static.com%2Ff6fe0612-9759-4ed9-9116-a0715faf3d1f%2FUntitled.png?table=block&id=19383685-846d-4851-aaca-8c8f2aaef4db&cache=v2)
查看某一天连接过的 IP 个数
cat access.log | grep 25/Feb/2021 | cut -d " " -f3 | sort | uniq -c | sort -n | wc -l
查看s3域名的流量,单位为 B
cat access.log | grep s3 | awk '{print $8}' | awk '{sum+=$1}END{print sum}' cat access.log | grep s3 | awk '{print $9}' | awk '{sum+=$1}END{print sum}'
查看某个 IP 在某一天消耗的域名
cat access.log | grep 117.30.58.98 | grep "04/Apr/2021" | awk '{print $8}' | awk '{sum+=$1}END{print sum}' cat access.log | grep "03/Apr/2021" | grep 117.30.58.98 | awk '{print $8}' | awk '{sum+=$1}END{print sum}'