Multiple expressions on the grep command

I am trying to grep for an IP and result code (TCP_DENIED), but I'm not having any luck. My command line is as follws:
grep -e x.x.x.x*TCP_DENIED -i -t accesslogs
I've tried different variations such as leaving a space between the IP and TCP_DENIED and adding an * between the variables, but nu lick.
Can someone please provide the correct command for this?
Thx,
Jeff

Grep is "menuy"....
Just type "grep", hit enter, follow the prompts... I have seen reference to escaping out the periods in an IP address in the regex... (eg 192\.168\.0\.10)
Enter the number of the log you wish to grep.
[]> 1
Enter the regular expression to grep.
[]> 172.168.151.1
Do you want this search to be case insensitive? [Y]>
Do you want to search for non-matching lines? [N]>
Do you want to tail the logs? [N]> y
Do you want to paginate the output? [N]> y
Hope that helps.
Ken

Similar Messages

Is there a way to give two different regular expressions in a Grep command?

I am trying to search message logs from CLI. My search query which involves a regular expression is giving thousands of results. We need to further filter the results using another regular expression. Please let me know if we can put two regular expressions in the search query.
Below is how I use grep command: Can I use multiple regular expression separated by a "|" (pipe) symbol
Enter the regular expression to grep.
[]> MID 123456

No - unfortunately - from the CLI on the ESA/SMA - the 'grep' command is not as intuitive as the unix/linux 'grep'. You would need to push logs off appliance, and then take advantage of an external OS in order to parse through the logs as definitively needed.
-Robert
(*If you have received the answer to your original question, and found this helpful/correct - please mark the question as answered, and be sure to leave a rating to reflect!)

How about the grep command must be written

as the picture taking comma reference
first to the right square brackets "["   or   open parenthesis "(" and left first square brackets "]" or open parenthesis ")"
character style How to apply
var doc = app.activeDocument;
app.findGrepPreferences = app.changeGrepPreferences = null;
app.findGrepPreferences.findWhat = "(\\[|()(\\.)(?=\\w)"; \\???
app.changeGrepPreferences.changeTo = \\???
app.changeGrepPreferences.appliedCharacterStyle = "myChar";
doc.changeGrep();
app.findGrepPreferences = app.changeGrepPreferences = null;

app.findGrepPreferences = app.changeGrepPreferences = null;
app.findGrepPreferences.findWhat = "(\\[|\$)(?=(.+, .+))";
app.changeGrepPreferences.appliedCharacterStyle = "myChar";
app.changeGrep();
app.findGrepPreferences = app.changeGrepPreferences = null;
app.findGrepPreferences = app.changeGrepPreferences = null;
app.findGrepPreferences.findWhat = "(?<=\d|\l)\$|\\]";
app.changeGrepPreferences.appliedCharacterStyle = "myChar";
app.changeGrep();
app.findGrepPreferences = app.changeGrepPreferences = null;

Grep command has lost the "-P" option

The grep command has lost the "-P" option. It now supports a non-standard "-p" option that doesn't work on previous versions of OS X or Linux. It also doesn't support the long form version of "--perl-regexp". Any portable solutions?
In addition, the command line usage still shows "-P" as an option, but the man page doesn't list it.

The grep command has lost the "-P" option. It now supports a non-standard "-p" option that doesn't work on previous versions of OS X or Linux. It also doesn't support the long form version of "--perl-regexp". Any portable solutions?
In addition, the command line usage still shows "-P" as an option, but the man page doesn't list it.

CLI grep command in AsyncOS 4.5

A late addition to AsyncOS 4.5 was the CLI "grep" command. Yes, it is a "hidden" command and we would like input from IronPort Nation on whether this is useful and what additions they would like to see to it. Here are a brief set of examples on its use:
boxster.mfg> help grep
grep -e regexp [-e regexp] [-i] [-p] [-t] log_name
Run the Unix grep command over the named log file.
Normally the grep will be run over all files in the
named log subscription. Using the -t option will run
the grep over a tail of the log file. Using the -i
option will ignore case sensitivities. Using the -p
option will paginate the output.
regexp - an extended grep expression
log_name - the name of the log file
Manually using grep will look like this:
boxster.mfg> grep
Currently configured logs:
1. "antivirus" Type: "Anti-Virus Logs" Retrieval: FTP Poll
2. "asarchive" Type: "Anti-Spam Archive" Retrieval: FTP Poll
3. "avarchive" Type: "Anti-Virus Archive" Retrieval: FTP Poll
4. "bounces" Type: "Bounce Logs" Retrieval: FTP Poll
5. "brightmail" Type: "Symantec Brightmail Anti-Spam Logs" Retrieval: FTP Poll
6. "case" Type: "Context Adaptive Scanning Engine" Retrieval: FTP Poll
7. "cli_logs" Type: "CLI Audit Logs" Retrieval: FTP Poll
8. "error_logs" Type: "IronPort Text Mail Logs" Retrieval: FTP Poll
9. "ftpd_logs" Type: "FTP Server Logs" Retrieval: FTP Poll
10. "gui_logs" Type: "HTTP Logs" Retrieval: FTP Poll
11. "mail_logs" Type: "IronPort Text Mail Logs" Retrieval: FTP Poll
12. "scanning" Type: "Scanning Logs" Retrieval: FTP Poll
13. "sntpd_logs" Type: "NTP logs" Retrieval: FTP Poll
14. "status" Type: "Status Logs" Retrieval: FTP Poll
15. "system_logs" Type: "System Logs" Retrieval: FTP Poll
Enter the number of the log you wish to grep.
[]> 11
Enter the regular expression to grep.
[]> MID
Do you want this search to be case insensitive? [Y]> n
Do you want to tail the logs? [N]>
Do you want to paginate the output? [N]>
For a single regular expression:
boxster.mfg> grep -e MID mail_logs
For multiple regular expressions:
boxster.mfg> grep -e MID -e RID mail_logs
For multiple regular expressions in the current log:
boxster.mfg> grep -e MID -e RID mail_logs -t
For multiple regular expressions in the current log with a case
insensitive match and paginate:
boxster.mfg> grep -i -e MID -e RID mail_logs -t -p
Grab a specific ICID line:
boxster.mfg> grep -e "ICID1238" mail_logs
Tue Oct 18 07:58:19 2005 Info: New SMTP ICID 1238 interface main (172.18.0.40) address 172.18.0.40 reverse dns host porky3.mfg verified yes
Tue Oct 18 07:58:19 2005 Info: ICID 1238 ACCEPT SG None match ALL SBRS rfc1918
Tue Oct 18 07:58:19 2005 Info: Start MID 211476 ICID 1238
Tue Oct 18 07:58:19 2005 Info: MID 211476 ICID 1238 From: <[email protected]>
Tue Oct 18 07:58:19 2005 Info: MID 211476 ICID 1238 RID 0 To: <[email protected]>
Tue Oct 18 07:58:19 2005 Info: ICID 1238 close
Look for DHAP connections:
boxster.mfg> grep -t -e "Dropping connection" mail_logs
Press Ctrl-C to stop.
Wed Oct 19 18:05:28 2005 Warning: LDAP: Dropping connection due to potential Directory Harvest Attack from host=('172.18.0.40', None), dhap_limit=5, sender_group=Default
Wed Oct 19 18:05:30 2005 Warning: LDAP: Dropping connection due to potential Directory Harvest Attack from host=('172.18.0.40', None), dhap_limit=5, sender_group=Default
Wed Oct 19 18:05:32 2005 Warning: LDAP: Dropping connection due to potential Directory Harvest Attack from host=('172.18.0.40', None), dhap_limit=5, sender_group=Default
Wed Oct 19 18:06:15 2005 Warning: LDAP: Dropping connection due to potential Directory Harvest Attack from host=('172.18.0.40', None), dhap_limit=5, sender_group=Default
Wed Oct 19 18:06:17 2005 Warning: LDAP: Dropping connection due to potential Directory Harvest Attack from host=('172.18.0.40', None), dhap_limit=5, sender_group=Default

(Been away from IPN for a while, catching up).
As a long time Unix sysadmin, I'm also a little frustrated by the locked down nature of AsyncOS, especially since I know that under the hood it's my particular Unix flavor of choice. For example, when I see the CPU stuck at or near 100%, I really want to fire up "top" and see what's soaking up the CPU. I had that problem recently and needed to make a tech support call for what turned out to be something I could have diagnosed myself had I just been able to use "top". I've also had times when direct access to "netstat" and "ifconfig -a" would have saved me a lot of trouble (like when someone changed the duplex setting on the switch port).
That said, I know that IronPort has some valuable intellectual property to protect from prying eyes. But it seems to me that a compromise could be reached. We don't need to be able to peek under every rock in order to have much improved sysadmin abilities.
Oh yeah, I like the "grep" command. :-) I've been wishing for that for quite a while.

Grep command - binary file

When using the grep command for the mail_logs file I sometimes receive the message "Binary file (standard input) matches."
This does not always happen. Sometimes I'm able to use grep and receive the expected results. The problem seems to come and go.
Doing it via the command line or stepping through the setup (i.e. grep > 14 (mail_logs) > expression > ...) will show the same "Binary file (standard input) matches" message.
Thank you for any help ahead of time.
(btw - this is for a C350)

Current Version
===============
Model: C350
Version: 6.5.2-101
Build Date: 2009-05-28
Install Date: 2009-06-09 17:46:52
Serial #: xxxxxxxxxxxxxx
BIOS: 1.2.1I
RAID: 1.00.01-0088, MT23, 1.02-007
RAID Status: Optimal
RAID Type: 1
BMC: 1.27
> grep
Currently configured logs:
1. "QMaticLog" Type: "Domain Debug Logs" Retrieval: FTP Poll
2. "antispam" Type: "Anti-Spam Logs" Retrieval: FTP Poll
3. "antivirus" Type: "Anti-Virus Logs" Retrieval: FTP Poll
4. "asarchive" Type: "Anti-Spam Archive" Retrieval: FTP Poll
5. "authentication" Type: "Authentication Logs" Retrieval: FTP Poll
6. "avarchive" Type: "Anti-Virus Archive" Retrieval: FTP Poll
7. "bounces" Type: "Bounce Logs" Retrieval: FTP Poll
8. "cli_logs" Type: "CLI Audit Logs" Retrieval: FTP Poll
9. "error_logs" Type: "IronPort Text Mail Logs" Retrieval: FTP Poll
10. "euq_logs" Type: "IronPort Spam Quarantine Logs" Retrieval: FTP Poll
11. "euqgui_logs" Type: "IronPort Spam Quarantine GUI Logs" Retrieval: FTP Poll
12. "ftpd_logs" Type: "FTP Server Logs" Retrieval: FTP Poll
13. "gui_logs" Type: "HTTP Logs" Retrieval: FTP Poll
14. "mail_logs" Type: "IronPort Text Mail Logs" Retrieval: FTP Poll
15. "reportd_logs" Type: "Reporting Logs" Retrieval: FTP Poll
16. "reportqueryd_logs" Type: "Reporting Query Logs" Retrieval: FTP Poll
17. "scanning" Type: "Scanning Logs" Retrieval: FTP Poll
18. "slbld_logs" Type: "Safe/Block Lists Logs" Retrieval: FTP Poll
19. "sntpd_logs" Type: "NTP logs" Retrieval: FTP Poll
20. "status" Type: "Status Logs" Retrieval: FTP Poll
21. "system_logs" Type: "System Logs" Retrieval: FTP Poll
22. "trackerd_logs" Type: "Tracking Logs" Retrieval: FTP Poll
23. "updater_logs" Type: "Updater Logs" Retrieval: FTP Poll
Enter the number of the log you wish to grep.
[]> 14
Enter the regular expression to grep.
[]> 23083882
Do you want this search to be case insensitive? [Y]>
Do you want to tail the logs? [N]>
Do you want to paginate the output? [N]>
Binary file (standard input) matches
> grep 23083882 mail_logs
Binary file (standard input) matches
Hopefully this is everything you were looking for. If not, let me know.

A Unix question: grep command

Hi all,
I have a directory which contains more directories, and each directory has more directories inside, which in turn may or may not contain Java files. I need to use the grep command in the way that from the first directory goes into the directories recursively, finds the Java files and tell me what files have the PATTERN= "Basic Import Validation".
I used the grep like this, but guess its wrong since haven't received any response so far. Can sb. please tell me if I've used the command correctly or how should I change it? Any help is greatly appreciated.
dir> grep -r --include="Basic Import Validation" *.java

I gues the reason this isn't working for you isthat
-r means "process all subdirectories of any
directories listed in the command line args."
grep never sees the *.java that you supply. Theshell
grabs that and expands it to list all the .javafiles
in the pwd.If you can, would you please explain a little more,
what you meant by above?
grep whatever *.java When you type that command, your shell (bash, zsh, ksh, tcsh, etc.) is the program that receives that string on its standard input--like Java's System.in. The shell sees *.java and expands it into a list of all the .java files in the current directory. Then the shell invokes grep, and passes on the list of those java files.
But the list of .java files in the pwd has nothing to do with any java files that might be in subdirs.
If you use the -r arg, it seems that, in the list of "files" (where you put *.java), if any of those "files" are in fact directories, then -r means to look in files in that dir and its subdirs, rather than treating that arg as a file to examine.
So you'd put . (dot) as your current dir, and then use the --include to tell grep which files to process and which to ignore.
I'm sure about the shell expanding *.java. I'm not completely sure about my interpretation of -r and --include, but I'm pretty confident that's right.
As you said, the way I used grep, didn't return any
result. Your solution however, gave me results and
found the Java files containing the PATTERN. Thanks a
lot.You're welcome.
If you're still interested, it's probably worth trying out my slight modification to your original solution. If it works, it's a bit cleaner and simpler.

Useful grep commands

Hello.
I am compiling a list of the grep commands I use in everyday EBS support related tasks. I have posted them below. Would anyone like to add any others??
process check
check of all Midle Tier services:
ps –fu appltest | grep –i TEST | wc -l
forms:
$ps -ef | grep f60webmx | grep VIS
Concurrent Mangers:
ps -fu appldev | grep FNDLIBR
Apache
$ps -ef | grep httpd| grep vis
For more information about a process 2342:
$ps -ef | grep 2342
workers process ID:
ps -a | grep adworker
Listing processes owned by ias
ps -ef|grep ias
review patch log:
egrep -i 'error|warn|fail' <log_file>
DA

Dan,
Why you need to list those commands?
With the help of "ps -ef" command you can filter any process you need to check (just get the process name).
Thanks,
Hussein

Plz clarify with grep command

Regarding grep command,i have given in linux
grep -r "some name" & (& i have given instead of *).after enter some below mesg throws like
[+1] + stopped [sigttin] .
when i typed exit it shows YouHave stopped jobs.
Is this any problem with this command for running background jobs?
can anyone please suggest ASAP.Thanks in Advance.

grep -r "some name"Are you searching for file content or filename? In the later case, you would use find, not grep.
The grep command requires a file paramter. & as file parameter is not valid.
You could possibly use "grep -r "something" ./* &. But what would be the purpose of running such a command in the background unless you pipe the output to a file, e.g.
<pre>
grep -r "something" * > output.lst &
</pre>

Run invoke-command on multiple machines at the same time

Hey all so I read that if I store my New-pssession in a variable then used that in my invoke-command it would run all computers at the same time.
$a = Get-Content "C:\Users\cody-horton\Desktop\list.txt"
$session
for($i=0;$i -lt $a.Length;$i++){
if(!(Test-Connection -Cn $a[$i] -BufferSize 16 -Count 1 -ea 0 -quiet)){
Write-Host $a[$i] -foregroundcolor red
else{
$session = New-PSSession $a[$i]
Invoke-Command -Session $session -FilePath "\\My computer\C`$\Users\public\Documents\zip folder.ps1"
What exactly am I doing wrong I just need to run this script on multiple machines at the same time.
Thanks.
Edit: Also what would be the best way to close all the sessions thanks.

Hi there,
So what I think you are doing wrong here is that you are overwriting the value in $Session everytime you executed code inside for loop. try the below:
$a = Get-Content "C:\Users\cody-horton\Desktop\list.txt"
$session = @() #define this as an array
for($i=0;$i -lt $a.Length;$i++){
if(!(Test-Connection -Cn $a[$i] -BufferSize 16 -Count 1 -ea 0 -quiet)){
Write-Host $a[$i] -foregroundcolor red
else{
$session += New-PSSession $a[$i] #add the new session to the array, at the end it will be a collection of sessions
Invoke-Command -Session $session -FilePath "\\My computer\C`$\Users\public\Documents\zip folder.ps1" #I think the above one won't work..first you need to copy the script locally on the machine and then execute it#Why this won't work because of Second-Hop Authentication
Have put comments where I edited your code.
Hope this helps
Knowledge is Power{Shell}. http://dexterposh.blogspot.com/

Can I use multiple printers on the current airport express??

I would like to hook up multiple (3) printers for wireless printing using AirPort Express. Would also entertain AirPort Extreme. The printers are just too far away to make cabling practical and was wondering if the current crop of AirPort devices would support multiple printers through the use of an attached USB hub. The only other thread that seems to discuss this is from 2006. The salesperson at my local AppleStore did not have the info and suggested I come to these forums and ask the community.
I am running a MacBook Pro 17" 233 GHz Core2Duo with MacOSX 10.6.8
The printers I would like to connect are 1 epson Pro7600 wide format, 1 HP DesignJet 1220c and a Brother 1440 laser printer.
Thanks
Phil

was wondering if the current crop of AirPort devices would support multiple printers through the use of an attached USB hub
Yes....if you use a powered USB hub with its own power supply.
I use a 4 port USB powered hub from Dynex available at Best Buy. Works fine. I am sure that there are many other powered hubs that will work as well.
http://www.bestbuy.com/site/Dynex%22+-+4-Port+USB+2.0+Hub/2120061.p?id=121831496 8492&skuId=2120061

Is there any command in windows batch file similar to the unix grep command

Hi,
I have a batch file which will return status of the Database to a file ex: "OPEN". Now I want to read this output file and check for the "OPEN" string from another batch file. any suggestions?. This is similar to "grep" command in unix. I want this to be done in windows batch file.
This is my actual batch file
rem -- Description: Check whether the Database is UP
rem -- Usage:
rem -- ORACLE_SID is input parameter for the file
rem --
rem --start of batch file
@echo off
set ORACLE_SID=%1
echo connect plp/ltd1plp@%1
echo set cmdsep on
echo set cmdsep '"'; --"
echo set term on
echo spool c:/status_log.log
echo select status from v$instance;
echo spool off
) | sqlplus /nolog
rem --end batch file
Thanks.

The same link from [google cache|http://209.85.229.132/search?q=cache:EJrm9tgj0a8J:www.microsoft.com/resources/documentation/windows/xp/all/proddocs/en-us/find.mspx+windows+find&cd=1&hl=en&ct=clnk&client=opera]. Also you can use help:
find /?

Export to PDF - Can a single report (rpt file) create multiple PDF files using the export command?

Post Author: markeyjd2
CA Forum: Exporting
Greetings forum members,
My question is, in its entirety: Can a single report (rpt file) create multiple PDF files using the export command, ideally one PDF file per DB record?
In my case; I have a Crystal Report that reads data from a DB table containing ~ 500 records. When I export the report to a PDF file, I get one PDF file, with ~ 500 pages.
What I would like to do is export the report to ~ 500 individual PDF files; One file per DB record. The file names would be based on the table's primary key.
Is this possible?

Post Author: Micha
CA Forum: Exporting
Hi,
you need some lines of code, but its easy. Dependend on how to start the generation of your 500 PDFs, you can write an ASP page and start it via Web Browser, or a Windows Script and start it via scheduled job...
Here's an abstract of the ASP code I use:
First, you create a recordset (here: "rsc") which gives you the list of ID fields you want to export, then you create CrystalRuntime.Application object, then you loop through the recordset, open your report (here: "oRpt") and set login info. Then set the selectionformula, so that the report displays only the data of the current ID, e.g.:
oRpt.RecordSelectionFormula = "(" & oRpt.RecordSelectionFormula & ") AND {myTab.myVal}=" & rsc("myVal")
Then you export the report, move to the next record in recordset, and repeat the loop until recordset.EOF. Then you close recordset and connection.
Micha

Grep command to achieve the following - Almost got it

Hi
I have been on here before and received great help with grep styles but have one that I can't find a solution for from online resources
I am using the following grep command to add a descriptor to a event.
My text looks like this
9.00     Football
Grep command is
(\d+\.\d+\t)(Football)(.*\r.+\r)
$1$2$3Play football.\r
Which acheives...
9.00     Football
            Play football
Problem is
Some of the titles are
9.00   Sunday Football
9.00   Junior Football
9.00   Junior 5 a side Football
I ideally need a grep command that will do exactly the same but ignore Sunday, Junior, Junior 5 a side (but leave it in) I can't add extra greps as there are too many
Is there a command that will find the digits (ignore everthing until football) and add the descriptor
Hopefuly it is just a little addition to the grep but I can't find a solution
Any help much appreciated

I'm a little unclear
when starting with:
9.00   Sunday Football
9.00   Junior Football
9.00   Junior 5 a side Football
what do you want the result to be? This, or something else--
9.00   Sunday Football
          Play Football
9.00   Junior Football
          Play Football
9.00   Junior 5 a side Football
          Play Football

How to pass multiple words as a search argument on the Acrobat Command Line?

I am trying to launch Acrobat using a multi-word search parameter on a Windows XP box. However, Acrobat is stripping the spaces between words. For example, I am trying to load Acrobat and have it search for the phrase "vision changes" using a Command Line like this:
C:\>"C:\Program Files\Adobe\Reader 8.0\Reader\AcroRd32.exe" /A search="vision changes" c:\temp\theDocument.pdf
When Acrobat loads, it shows the search panel with the phrase "visionchanges" in it. The space between the two words is gone and naturally it can't find the phrase.
I have read both the PDF Command Line parameter documents I could find. This format works fine for URLs, but for Shelling Acrobat on the local system, it doesn't work because of the space stripping problem. I have tried lots of different variants of quote characters, escape characters, even HTML characters like "&nbps;", but nothing works.
Does anyone have an answer?
For the curious here are links to the two PDF documents I found that cover the command line arguments:
http://www.adobe.com/devnet/acrobat/pdfs/PDFOpenParameters.pdf
http://www.adobe.com/devnet/acrobat/pdfs/pdf_open_parameters.pdf
Thanks,
Robert

Hey Robert,
Did you note that in the "pdf_open_parameters.pdf" document, it says that the value of the Search parameter is treated as a list of (single) words, not as a string of words (phrase)?
It says it explicitly: "You can search only for single words. You cannot search for a string of words."
PS: I'm replying to your query as a sort of thank you for posting the links to those documents. It helped me to find the way of conditioning how to open a pdf.

Multiple expressions on the grep command

Similar Messages

Maybe you are looking for