The non-trivial part of sorting log files is efficiency, especially when you get into logs that are of any significant size.

If you have small(ish) log files or memory to burn, then a Schwartzian or Guttman-Rossler Transform can make for a short and simple (YMMV :)) script...

#!/usr/bin/perl -w

use strict;
use Time::Piece;

die "$0 [input] [output]\n"      unless @ARGV;
die "Input/output can't match\n" if $ARGV[0] eq $ARGV[1];

open UNSORTED, "< $ARGV[0]" 
  or die "Can't open $ARGV[0] for reading: $!\n";
open SORTED,   "> $ARGV[1]"
  or die "Can't open $ARGV[1] for writing: $!\n";

print SORTED 
  map  { $_->[1]              } # restore data to original form
  sort { $a->[0] <=> $b->[0]  } # sort by time/date
  map  { [ epoch_date(), $_ ] } # prepend time/date as secs
  <UNSORTED>;

sub epoch_date {
      # Convert Apache style-dates to epoch seconds
    return unless /^\S+ \S+ \S+ (\S+)/;
    return Time::Piece->strptime( $1, "[%d/%b/%Y:%T" );
}

[download]

    --k.


In reply to Re: Sorting dates and times by Kanji
in thread Sorting dates and times by Anonymous Monk

Title:
Use:  <p> text here (a paragraph) </p>
and:  <code> code here </code>
to format your post, it's "PerlMonks-approved HTML":


  • Posts are HTML formatted. Put <p> </p> tags around your paragraphs. Put <code> </code> tags around your code and data!
  • Titles consisting of a single word are discouraged, and in most cases are disallowed outright.
  • Read Where should I post X? if you're not absolutely sure you're posting in the right place.
  • Please read these before you post! —
  • Posts may use any of the Perl Monks Approved HTML tags:
    a, abbr, b, big, blockquote, br, caption, center, col, colgroup, dd, del, details, div, dl, dt, em, font, h1, h2, h3, h4, h5, h6, hr, i, ins, li, ol, p, pre, readmore, small, span, spoiler, strike, strong, sub, summary, sup, table, tbody, td, tfoot, th, thead, tr, tt, u, ul, wbr
  • You may need to use entities for some characters, as follows. (Exception: Within code tags, you can put the characters literally.)
            For:     Use:
    & &amp;
    < &lt;
    > &gt;
    [ &#91;
    ] &#93;
  • Link using PerlMonks shortcuts! What shortcuts can I use for linking?
  • See Writeup Formatting Tips and other pages linked from there for more info.