过滤日志。很多时候我们需要按照时间段来分析日志。比如查看早上或某月某日的具体日志，就不能简单实用地使用tail-f。或者head-n命令。这时候就需要借用awk了。命令zcatcom.log20160529.gz|grep'大众点评回复.log'|awk'{split($4,array,"[");if(array[2]>="29/May/2016:00:00:26"&&array[2]<="29/May/2016:00:01:14"){print$0}}'解释扫描gz压缩文件，寻找有dianping_reply的行，根据[拆分新行，然后直接用if条件判断，比较，最后输出期望的结果。命令解析：zcat直接读取压缩文件内容，grep用于过滤特定字符的行，awk用于执行命令，split用于拆分字符串，另一种情况test.log[22/Feb/2017-18:51:58]api.momo.com/api/feedHTTP/1.1121.0.0.1android1.2[22/Feb/2017-18:51:59]api.momo.com/api/followHTTP/1.1121.0.0.2iphone1.1[22/Feb/2017-18:52:58]api.momo.com/api/userHTTP/1.1121.0.0.3iphone1.1[22/Feb/2017-18:52:41]api。momo.com/api/feedHTTP/1.1121.0.0.4android1.2[22/Feb/2017-18:56:30]api.momo.com/api/followHTTP/1.1121.0.0.2android1.2[22/Feb/2017-18:51:21]api.momo.com/api/userHTTP/1.1121.0.0.3iphone1.1[22/Feb/2017-18:59:58]api.momo.com/api/userHTTP/1.1121.0.0.3android1.2[22/Feb/2017-18:51:21]api.momo.com/api/feedHTTP/1.1121.0.0.1iphone1.122/Feb/2017-18之前查询：52:59记录猫test.log|awk'{split($1,array,"[");split(array[2],array2,"]");if(array2[1]>="22/Feb/2017-18:52:59"){打印（$0）}}'
