#!/usr/bin/env perl# Filter the rsync daemon log messages by module name. The log file can be# in either syslog format or rsync's own log-file format. Note that the# MODULE_NAME parameter is used in a regular-expression match in order to# allow regex wildcards to be used. You can also limit the output by# directory hierarchy in a module. Examples:## logfilter foo /var/log/rsyncd.log # output lines for module foo# logfilter foo/dir /var/log/syslog # limit lines to those in dir of foouse strict;my $match = shift;die "Usage: logfilter MODULE_NAME [LOGFILE ...]\n" unless defined $match;my $syslog_prefix = '\w\w\w +\d+ \d\d:\d\d:\d\d \S+ rsyncd';my $rsyncd_prefix = '\d\d\d\d/\d\d/\d\d \d\d:\d\d:\d\d ';my %pids;while (<>) { my($pid,$msg) = /^(?:$syslog_prefix|$rsyncd_prefix)\[(\d+)\]:? (.*)/o; next unless defined $pid; my($mod_spec) = $msg =~ /^rsync (?:on|to) (\S+) from /; if (defined $mod_spec) { if ($mod_spec =~ /^$match(\/\S*)?$/o) { $pids{$pid} = 1; } else { delete $pids{$pid}; } } next unless $pids{$pid}; print $_;}
#!/usr/bin/env perl
# Filter the rsync daemon log messages by module name. The log file can be
# in either syslog format or rsync's own log-file format. Note that the
# MODULE_NAME parameter is used in a regular-expression match in order to
# allow regex wildcards to be used. You can also limit the output by
# directory hierarchy in a module. Examples:
#
# logfilter foo /var/log/rsyncd.log # output lines for module foo
# logfilter foo/dir /var/log/syslog # limit lines to those in dir of foo
use strict;
my $match = shift;
die "Usage: logfilter MODULE_NAME [LOGFILE ...]\n" unless defined $match;
my $syslog_prefix = '\w\w\w +\d+ \d\d:\d\d:\d\d \S+ rsyncd';
my $rsyncd_prefix = '\d\d\d\d/\d\d/\d\d \d\d:\d\d:\d\d ';
my %pids;
while (<>) {
my($pid,$msg) = /^(?:$syslog_prefix|$rsyncd_prefix)\[(\d+)\]:? (.*)/o;
next unless defined $pid;
my($mod_spec) = $msg =~ /^rsync (?:on|to) (\S+) from /;
if (defined $mod_spec) {
if ($mod_spec =~ /^$match(\/\S*)?$/o) {
$pids{$pid} = 1;
} else {
delete $pids{$pid};
}
}
next unless $pids{$pid};
print $_;
}