How to view what happened to server in specific time period and specific date?
For example: I want to see what happened 23.03.2013 from 6-8am
i want to use command line, maybe cat+grep+sort ?
log looks like "Mar 24 22:32:49 serv named"
Server Fault is a question and answer site for system and network administrators. It only takes a minute to sign up.Sign up to join this community
My syslog timestamps look like this:
2013-03-24T06:25:02-05:00, so I usually do something like this:
grep '^2013-03-24T0' $LOG
In your viewer or editor, open the log file, and then use its search function for text that matches the logfile's format that corresponds with the beginning of the time period. Then continue scrolling in the forward direction (which may be up or down, depends on how your application writes its logs.)
If you need more instructions, you'll need to clarify what you're looking for; try editing your question.