From owner-freebsd-questions@FreeBSD.ORG Mon Mar 30 21:09:13 2009 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id AD71C106568B for ; Mon, 30 Mar 2009 21:09:13 +0000 (UTC) (envelope-from mel.flynn+fbsd.questions@mailing.thruhere.net) Received: from mailhub.rachie.is-a-geek.net (rachie.is-a-geek.net [66.230.99.27]) by mx1.freebsd.org (Postfix) with ESMTP id 7A7A18FC1C for ; Mon, 30 Mar 2009 21:09:13 +0000 (UTC) (envelope-from mel.flynn+fbsd.questions@mailing.thruhere.net) Received: from sarevok.dnr.servegame.org (gate.lan.rachie.is-a-geek.net [192.168.2.10]) by mailhub.rachie.is-a-geek.net (Postfix) with ESMTP id 58D3D7E818; Mon, 30 Mar 2009 13:09:12 -0800 (AKDT) From: Mel Flynn To: freebsd-questions@freebsd.org Date: Mon, 30 Mar 2009 23:09:10 +0200 User-Agent: KMail/1.11.0 (FreeBSD/8.0-CURRENT; KDE/4.2.0; i386; ; ) References: <5BCD53E0-5B9F-4349-8401-FBF0ACF369C2@charter.net> <200903302211.30208.mel.flynn+fbsd.questions@mailing.thruhere.net> <82E8EACC-E6A3-48FA-9203-80A5F924870F@charter.net> In-Reply-To: <82E8EACC-E6A3-48FA-9203-80A5F924870F@charter.net> MIME-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: 7bit Content-Disposition: inline Message-Id: <200903302309.11020.mel.flynn+fbsd.questions@mailing.thruhere.net> Cc: Charles Howse Subject: Re: analyzing httpd-error.log X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 30 Mar 2009 21:09:14 -0000 On Monday 30 March 2009 22:55:35 Charles Howse wrote: > grep "$date" httpd-error.log | grep -v 192.168.254.254 | grep -v > 192.168.254.3 > /root/err.log Using pcregrep, installed by devel/pcre, typically available on apache systems: pcregrep "$date.* \[client (?!192\.168\.254)" /var/log/httpd-error.log | \ mail -s"Error log for $date" charles Should work. As far as I know, look ahead assertions aren't supported by re(7) or the extended version. -- Mel