Cherry picking Log File entries

Hi, to begin this is not homework.

I am attempting to delve into a logfiles whose formats are as follows..

xx.xx.153.22 - - [23/Oct/2003:05:42:50 -0700] "GET /img_/misc/ekbh.gif HTTP/1.1" 200 43 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; .NET CLR 1.1.4322; MSN 8.0; MSN 8.5; MSNbMSNI; MSNmen-us; MSNcIA)" 0
xx.xx.210.61 - - [23/Oct/2003:05:43:40 -0700] "GET /img_/misc/okil.gif HTTP/1.0" 304 - "-" "Mozilla/4.0 (compatible; MSIE 5.01; Windows NT 5.0)" 0

My wish is to pull from the logs the date, asset name (ekbh.gif), and the number of times that this asset has been called on that day. In my previous efforts at Perl I've been successful in getting browser info and which OS was used but this has stumped me. Can anyone help?

Thanks.

roodawgAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

FishMongerCommented:
I used two regexes to extract the date and file name, but it can also be done with a single (more complex) regex.

#!/usr/bin/perl -w

use Data::Dumper;

while (<DATA>) { # log file passed to the script via command line
   $date = $1 if (/\[([^:]+)/);
   $asset_name = $1 if (/([^\/]+)(?= HTTP)/);
   $assets{$date}{$asset_name}++;
}

print Dumper %assets;  # this was used as a debugging statement

for $key (keys %assets) {
   print "$key: ";
   for $value (keys %{$assets{$key}}) {
      print "$value=$assets{$key}{$value}\n";
   }
}


__DATA__
xx.xx.153.22 - - [23/Oct/2003:05:42:50 -0700] "GET /img_/misc/ekbh.gif HTTP/1.1" 200 43 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; .NET CLR 1.1.4322; MSN 8.0;MSN 8.5; MSNbMSNI; MSNmen-us; MSNcIA)" 0
xx.xx.210.61 - - [24/Oct/2003:05:43:40 -0700] "GET /img_/misc/okil.gif HTTP/1.0" 304 - "-" "Mozilla/4.0 (compatible; MSIE 5.01; Windows NT 5.0)" 0
xx.xx.153.22 - - [23/Oct/2003:05:42:50 -0700] "GET /img_/misc/ekbh.gif HTTP/1.1" 200 43 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; .NET CLR 1.1.4322; MSN 8.0;MSN 8.5; MSNbMSNI; MSNmen-us; MSNcIA)" 0
xx.xx.210.61 - - [24/Oct/2003:05:43:40 -0700] "GET /img_/misc/okil.gif HTTP/1.0" 304 - "-" "Mozilla/4.0 (compatible; MSIE 5.01; Windows NT 5.0)" 0
xx.xx.153.22 - - [23/Oct/2003:05:42:50 -0700] "GET /img_/misc/ekbh.gif HTTP/1.1" 200 43 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; .NET CLR 1.1.4322; MSN 8.0;MSN 8.5; MSNbMSNI; MSNmen-us; MSNcIA)" 0
xx.xx.210.61 - - [24/Oct/2003:05:43:40 -0700] "GET /img_/misc/okil.gif HTTP/1.0" 304 - "-" "Mozilla/4.0 (compatible; MSIE 5.01; Windows NT 5.0)" 0
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
FishMongerCommented:
Here is the output from that script.  (the lines prior to the last 2 are from the debugging statement)

$VAR1 = '24/Oct/2003';
$VAR2 = {
          'okil.gif' => 3
        };
$VAR3 = '23/Oct/2003';
$VAR4 = {
          'ekbh.gif' => 3
        };
24/Oct/2003: okil.gif=3
23/Oct/2003: ekbh.gif=3
0
FishMongerCommented:
I should have clarified one of those lines.

while (<DATA>) { # log file passed to the script via the __DATA__ section at the end of the script

while (<>) { # log file passed to the script via command line
0
roodawgAuthor Commented:
FM, thanks. This is a thing of beauty.

I should have mentioned that the logfiles are in the format of appserver.log.YYYY-MM-DD and reside in directories called appserv01, appserv02, appserv03, etc. My need is to have this script delve into each of the appservers (excluding any of the webserver directories). Oh and let's not for get formatting to a CSV file. As stated before I'm pretty new to all this and have done this in the past usint perl's opendir() and readdir() statements. I don't need code but by your experience is this the way to go?

Thanks
0
FishMongerCommented:
I don't have enough info to say if your approach is the best method but it sounds fine.  One thing you may want to look at using is the File::Find module.

http://search.cpan.org/~jhi/perl-5.8.1/lib/File/Find.pm
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Perl

From novice to tech pro — start learning today.

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.