#!/bin/sh
#Function: 快速分析iis日志腳本（日志格式W3C）
#Filename: analy_weblog.sh? How to: sh analy_weblog.sh logfile
#Coding: -*- utf-8 -*-
#Date = "2012-11-26" ; Author = "potaski@qq.com"
#Version = 0.9

log_file=$1

#--- 找出訪問量最多的前5個(gè)IP地址 ---
TOP_IP(){
awk -F' ' '{print $10}' ${log_file}|sort|uniq -c|sort -nr|head -n 5 > top_ip.tmp
}

#--- 找出訪問前5的IP地址所請(qǐng)求的url ---
TOP_IP_request(){
cat /dev/null > top_ip_request.tmp
base_file="top_ip.tmp"
while read line
do
??? _ip=`echo ${line}|awk -F' ' '{print $2}'`
??? echo "${line}" >> top_ip_request.tmp
??? grep ${_ip} ${log_file}|awk -F' ' '{print $6}'|sort|uniq -c|sort -nr|head -n 5 >> top_ip_request.tmp
done < ${base_file}
echo "===== TOP_5 source ip address and their request underline url =====" > result.log
cat top_ip_request.tmp >> result.log
echo "===== TOP_5 source ip address and their request underline url =====" >> result.log
echo "" >> result.log
}

#--- 找出被請(qǐng)求量前5的url ---
TOP_URL(){
awk -F' ' '{print $6}' ${log_file}|sort|uniq -c|sort -nr|head -n 5 > top_url.tmp
}

#--- 找出被請(qǐng)求量前5的url的來源IP地址 ---
TOP_URL_sourceip(){
cat /dev/null > top_url_sourceip.tmp
base_file="top_url.tmp"
while read line
do
??? _url=`echo ${line}|awk -F' ' '{print $2}'`
??? echo "${line}" >> top_url_sourceip.tmp
??? grep ${_url} ${log_file}|awk -F' ' '{print $10}'|sort|uniq -c|sort -nr|head -n 5 >> top_url_sourceip.tmp
done < ${base_file}
echo "===== TOP_5 access url and the source ip address =====" >> result.log
cat top_url_sourceip.tmp >> result.log
echo "===== TOP_5 access url and the source ip address =====" >> result.log
}

#--- 開始運(yùn)行，生成結(jié)果 ---
TOP_IP
TOP_IP_request
TOP_URL
TOP_URL_sourceip

轉(zhuǎn)載于:https://blog.51cto.com/potaski/1085482

總結(jié)

以上是生活随笔為你收集整理的简单快速分析iis日志脚本的全部?jī)?nèi)容，希望文章能夠幫你解決所遇到的問題。

如果覺得生活随笔網(wǎng)站內(nèi)容還不錯(cuò)，歡迎將生活随笔推薦給好友。