this post was submitted on 08 Sep 2023
1262 points (97.9% liked)

linuxmemes

21263 readers
572 users here now

Hint: :q!

Sister communities:

Community rules (click to expand)

1. Follow the site-wide rules

2. Be civil
  • Understand the difference between a joke and an insult.
  • Do not harrass or attack members of the community for any reason.
  • Leave remarks of "peasantry" to the PCMR community. If you dislike an OS/service/application, attack the thing you dislike, not the individuals who use it. Some people may not have a choice.
  • Bigotry will not be tolerated.
  • These rules are somewhat loosened when the subject is a public figure. Still, do not attack their person or incite harrassment.
    • 3. Post Linux-related content
  • Including Unix and BSD.
  • Non-Linux content is acceptable as long as it makes a reference to Linux. For example, the poorly made mockery of sudo in Windows.
  • No porn. Even if you watch it on a Linux machine.
    • 4. No recent reposts
  • Everybody uses Arch btw, can't quit Vim, and wants to interject for a moment. You can stop now.

    • Please report posts and comments that break these rules!

    founded 1 year ago
    MODERATORS
    poopsmith@lemmy.world
    zephyr@lemmy.world
    rtxn@lemmy.world
    1262
    Living the power user life over here (lemmy.dbzer0.com)
    submitted 1 year ago by lordgoose@lemmy.dbzer0.com to c/linuxmemes@lemmy.world
    65 comments fedilink hide all child comments
     
    you are viewing a single comment's thread
    view the rest of the comments
    [–] yojimbo@sopuli.xyz 16 points 1 year ago* (last edited 1 year ago) (2 children)

    A dirty linux admin here. Imagine you get ssh'd in nginx log folder and all you want to know are all the ips that have been beating againts certain URL in around last let's say last seven days and getting 429 most frequent first. In kittie script its like find -mtime -7 -name "*access*" -exec zgrep $some_damed_url {} \; | grep 429 | awk '{print $3}' | sort | uniq -c | sort -r | less depends on how y'r logs look (and I assume you've been managing them - that's where the zgrep comes from) should be run in tmux and could (should?) be written better 'n all - but my point is - do that for me in gui

    (I'm waiting ⏲)

    [–] immortalgeek@programming.dev 4 points 1 year ago

    As a general rule, I will have most of my app and system logs sent to a central log aggregation server. Splunk, log entries, even cloudwatch can do this now.

    But you are right, if there is an archaic server that you need to analyse logs from, nothing beats a find/grep/sed

    [–] Hobo@lemmy.world 3 points 1 year ago

    In splunk this is a pretty straightforward query and can be piped to stats count and sorted. I don't know if you'd exactly count that as gui though.