Thanks for the speedy response Luke. What I'm trying to accomplish is to write a function/subroutine, called eTime() which will return the epoch time which I will then use to compare the interval between an open and closed session. sol@ubuntu01 ~$ fgrep session /var/log/syslog | fgrep open | head -1 Jan 31 08:40:19 ubuntu01 sshd32346: pam_unix(sshd:session): session opened for user rocky by (uid=0) sol@ubuntu01 ~$ fgrep session /var/log/syslog | fgrep closed | head -1 Jan 31 08:52:42 ubuntu01 sshd32523: pam_unix(sshd:session): session closed for user rocky by (uid=0) Building on the code I have, I need to pass the parameters which include month, day, year, hour, min, and second back to the function. I'm new to Perl so my biggest challenge right now is to get the time from the syslog file into the function. Many thanks for the assistance. use Time::Local; %month = ( "Jan", 0, "Feb", 1, "Mar", 2, "Apr", 3, "May", 4, "Jun", 5, "Jul", 6, "Aug", 7, "Sep", 8, "Oct", 9, "Nov", 10, "Dec", 11 ); &eTime; $Interval = <closedSession - openSession> print "Interval = $Interval\n"; sub eTime { my ($x, $ss); # local variables my ($month, $day, $year, $hour, $min, $sec, $epoch); @syslogDate = split(/ /, $x); ($moty1, $day, $year) = split(/\//, $syslogDate[0]); # mm dd yyyy ($hour, $min, $sec) = split(/:/, $syslogDate1); # HH:MM:SS $moty2 = $month{$moty1}; $day = $day + 0; $hour = $hour + 0; $min = $min + 0; $sec = $sec + 0; $epoch = timelocal($sec, $min, $hour, $day, $moty2, $year); return $epoch; }

In reply to Re^2: How to create a subroutine function to return epoch time from syslog file by Anonymous Monk
in thread How to create a subroutine function to return epoch time from syslog file by Anonymous Monk

Title:
Use:  <p> text here (a paragraph) </p>
and:  <code> code here </code>
to format your post, it's "PerlMonks-approved HTML":


  • Posts are HTML formatted. Put <p> </p> tags around your paragraphs. Put <code> </code> tags around your code and data!
  • Titles consisting of a single word are discouraged, and in most cases are disallowed outright.
  • Read Where should I post X? if you're not absolutely sure you're posting in the right place.
  • Please read these before you post! —
  • Posts may use any of the Perl Monks Approved HTML tags:
    a, abbr, b, big, blockquote, br, caption, center, col, colgroup, dd, del, details, div, dl, dt, em, font, h1, h2, h3, h4, h5, h6, hr, i, ins, li, ol, p, pre, readmore, small, span, spoiler, strike, strong, sub, summary, sup, table, tbody, td, tfoot, th, thead, tr, tt, u, ul, wbr
  • You may need to use entities for some characters, as follows. (Exception: Within code tags, you can put the characters literally.)
            For:     Use:
    & &amp;
    < &lt;
    > &gt;
    [ &#91;
    ] &#93;
  • Link using PerlMonks shortcuts! What shortcuts can I use for linking?
  • See Writeup Formatting Tips and other pages linked from there for more info.