tags:

views:

40

answers:

2
+1  Q: 

Parse last imap login time from /var/log/mail.log

I've currently got a bash script that parses /var/log/mail.log to determine the last login time/date of a imap user. I've determined Perl is going to be a lot more efficient and quicker for this task, especially as the logs grow.

Given the following example /var/log/mail.log file:

Jul  5 06:57:54 mail-04 dovecot: imap-login: Login: user=<[email protected]>, method=PLAIN, rip=192.168.x.x, lip=192.168.x.x
Jul  5 06:59:54 mail-04 dovecot: imap-login: Login: user=<[email protected]>, method=PLAIN, rip=192.168.x.x, lip=192.168.x.x
Jul  5 06:59:59 mail-04 dovecot: imap-login: Login: user=<[email protected]>, method=PLAIN, rip=192.168.x.x, lip=192.168.x.x
Jul  5 07:01:54 mail-04 dovecot: imap-login: Login: user=<[email protected]>, method=PLAIN, rip=192.168.x.x, lip=192.168.x.x
Jul  5 07:01:59 mail-04 dovecot: imap-login: Login: user=<[email protected]>, method=PLAIN, rip=192.168.x.x, lip=192.168.x.x

What is the most efficient way in Perl to print the last login time of each unique user? E.g. the expected output should be:

[email protected] last imap-login: Jul 5 07:01:54
[email protected] last imap-login: Jul 5 07:01:59
+2  A: 

Using a hash and keep assigning the login time to the user name sounds like a simple solution.

$logins{$username} = $date
OneOfOne  2010-07-04 21:46:40
+1  A:  
perl -ne '$l{$2}=$1 if /^(.{15}) .* imap-login: Login: user=<([^>]+)>/; END { print "$_ last imap-login: $l{$_}\n" for keys %l }' /var/log/mail.log
dolmen  2010-07-05 09:16:43

related questions

Regex to replace Boolean with bool
How do I lock a file in Perl?
How do you use XML::Parser with Style => 'Objects'
Parsing XML Elements & Attributes with Perl
Regex to match all HTML tags except <p> and </p>
Best way to extract data from a FileMaker Pro database in a script?
What's the fastest way to determine a full URL from a relative URL (given a base URL).
Why can't I connect to my CAS server with Perl's AuthCAS?
Why can't I fetch wikipedia pages with LWP::Simple?
How do I perform a Perl substitution on a string while keeping the original?
How do I read in the contents of a directory in Perl?
How can Perl's system() print the command that it's running?
How can I test STDIN without blocking in Perl?
How do I tell if a variable has a numeric value in Perl?
Why doesn't my Perl map return anything?
How can I determine the type of a blessed reference in Perl?
Parsing attributes with regex in Perl
How do you retrieve selected text using Regex in C#?
Why does the Perl conditional operator not do what I expect?
Class::DBI-like library for php?
How do you create objects in Perl?
How do I remove duplicate items from an array in Perl?
Is The Perl Journal available online?
Can you force either a scalar or array ref to be an array in Perl?
What's the safest way to iterate through the keys of a Perl hash?