Bash监视jPos XML日志文件

Question

我需要监控由jPos生成的日志文件。日志输出如下所示：

<log realm="channel/10.10.23.81:18090" at="2015-02-08 00:00:19.540 CET" lifespan="9019ms">
  <receive>
    <isomsg direction="incoming">
      <!-- org.jpos.iso.packager.GenericPackager[cfg/iso93ascii.xml] -->
      <field id="0" value="1804"/>
      <field id="7" value="20150208000019"/>
      <field id="11" value="399335"/>
      <field id="24" value="831"/>
    </isomsg>
  </receive>
</log>
<log realm="channel/10.10.23.81:18090" at="2015-02-08 00:00:19.540 CET">
  <send>
    <isomsg direction="outgoing">
      <!-- org.jpos.iso.packager.GenericPackager[cfg/iso93ascii.xml] -->
      <field id="0" value="1814"/>
      <field id="7" value="20150208000019"/>
      <field id="11" value="399335"/>
      <field id="24" value="831"/>
      <field id="39" value="800"/>
    </isomsg>
  </send>
</log>

一条消息总是在日志标记之间，并且可能很长，有很多行。也可能包含错误，如：

<log realm="channel/10.10.23.81:18090" at="2015-02-06 00:01:58.728 CET" lifespan="26768ms">
  <receive>
    <iso-exception>
      org.jpos.iso.IFA_LLNUM: Problem unpacking field 56 (org.jpos.iso.ISOException: Field length 37 too long. Max: 35) unpacking field=56, consumed=282
      org.jpos.iso.ISOException: org.jpos.iso.IFA_LLNUM: Problem unpacking field 56 (org.jpos.iso.ISOException: Field length 37 too long. Max: 35) unpacking field=56, consumed=282
        at org.jpos.iso.ISOBasePackager.unpack(ISOBasePackager.java:265)
        at org.jpos.iso.ISOMsg.unpack(ISOMsg.java:420)
        at org.jpos.iso.BaseChannel.unpack(BaseChannel.java:924)
        at org.jpos.iso.BaseChannel.receive(BaseChannel.java:692)
        at org.jpos.q2.iso.ChannelAdaptor$Receiver.run(ChannelAdaptor.java:319)
        at java.lang.Thread.run(Thread.java:745)
    </iso-exception>
    --- data ---
    0000  31 34 32 31 46 36 37 34  30 35 43 35 30 45 45 30  1421F67405C50EE0
0010  41 31 30 30 30 30 30 30  30 30 30 32 30 34 30 30  A100000000010330
0020  30 30 30 30 31 36 2A 2A  2A 2A 2A 2A 2A 2A 2A 2A  000045**********
0030  2A 2A 33 34 34 32 30 30  30 30 30 30 30 30 30 30  **35670000000000
0040  30 30 30 31 38 30 30 30  30 30 30 30 30 30 30 31  0001800000000001
  </receive>
</log>

我想通过特定的时间戳("2015-02-06 16:")和字符串(像ORA，iso- grep，...)来异常整个消息。并逐行获得良好的输出(如原始外观)。jPos日志文件很大，我尝试设置任何故障的监控，结果要发送到电子邮件，所以应该是可读性的。

伙计们，你们知道吗？

Answer 1

我找到了解决方案。使用perl合并输出，对变量执行grep操作，然后通过tiny再次将其格式化为xml

log_file=/path/q2.log
log_hour="2015-02-06 10"
file_to_send=/path/email.txt
tidy_temp=/tmp/tidy.temp

perl -pe 's|\n|| ; s|</log>|</log>\n|' $log_file |grep $log_hour |grep -e "ORA-" -e "iso-exception"| tidy -f $tidy_temp -o $file_to_send -i -xml -