獲得Apache日誌以csv文件

Question

有沒有辦法來保存所有的Apache日誌爲CSV文件？

access.log->access_log.csv 
error.log->error_log.csv 

Answer 1

可以定義一個custom log format，以讓Apache直接登錄到一個逗號分隔的格式。

你可能有這樣擺弄了一會兒，找到正確的方法。例如，你可能會想使用"或'的字段分隔符，以防止域值內的逗號破壞您的CSV。

Answer 2

如果你有，你想看看寫在過去的日誌文件，日誌文件或從Apache的服務器，你沒有訪問配置文件，或者如果您由於某些其他原因不想的問題改變日誌文件格式：

我寫了一個little linux shell sed script是變換默認的Apache日誌文件轉換成可以由自由報辦公室計算讀取的格式：

#!/bin/bash 

#reformat apache's access logs, so that they can be interpreted as csv files, 
# with space as column delimiter and double quotes to bind together things 
# that contain spaces but represent single columns. 

# 1) add a doublequote at the begining of the line. first column is the ip adress. 
#  ip-adresses that have 3 digits in every group but the first could be interpreted as numbers 
#  with the dots marking groups of thousands. 

# 2a) end the ip-adress with quotes 
# 2b) surround the second (to me unknown) column thats always just "-" and the 
#  third column which is the username with quotes 
# 2c) reformat the date from "[09/Jul/2012:11:17:47" to "09.Jul 2012 11:17:47" 

# 3) remove the string "+0200]" (replace it with doublequotes to end the date column) 

# 4) the string that contains the command (5th column) sometimes contains string representation 
#  of binary rubish. thats no problem as long as this does not contain a doublequote which 
#  will mess up the column zoning. According to my web searches, csv columns should allow to 
#  contain doublequotes if they are escaped with a backslash. Although this is the case with 
#  these problematic strings, Libre Office does not accept it that way. therefore we escape every 
#  doublequote with a doubleqoute, which is the other valid option according to csv specifications, 
#  and libre office does accept that one. More technical: we replace every doublequote that does 
#  neither have a space or another doublequote before it, neither after it, with two doublequotes. 

sed \ 
-e 's/^/"/' \ 
-e 's/ \([^ ]\{1,\}\) \([^ ]\{1,\}\) \[\([0-9]\{1,2\}\)\/\([a-zA-Z]\{1,3\}\)\/\([0-9]\{1,4\}\):/" "\1" "\2" "\3.\4 \5 /' \ 
-e 's/ +0200\] /" /' \ 
-e 's/\([^" ]\)"\([^" ]\)/\1""\2/g'