[文本处理] 【已解决】批处理能否截取一短时间内的Log另存为新的Log？

w31575801

如题 批处理能否截取一个Log日志内的某段时间的Log另存为新的Log？

求教 从0:00:00:001~23:59:59:999 中选取一个时间段的怎么用bet指令操作
00:08:37.859 [KEY STATUS] Push Button Back Key

00:08:37.859  [SEQUENCE] Exec Sequence 1
00:08:37.875 #[SEQ1] Inspection Start !! [Model] D705 [S/W Ver : ] [H/W Ver : ] [Script Ver : D705[MP-3-N-FT57]-200316
00:08:39.234 [KEY STATUS] Push Button Back Key

00:08:39.250  [SEQUENCE] Exec Sequence 1
00:08:39.265 #[SEQ1] Inspection Start !! [Model] D705 [S/W Ver : ] [H/W Ver : ] [Script Ver : D705[MP-3-N-FT57]-200316
00:08:40.359 Esc Key pressed. ( A Stage )
00:08:40.625 RunThread1 [KEY STATUS] Push Button ESC Key

00:08:40.640  [SEQUENCE] Exec Sequence 1
00:08:40.656 #[SEQ1] Inspection Start !! [Model] D705 [S/W Ver : ] [H/W Ver : ] [Script Ver : D705[MP-3-N-FT57]-200316
00:08:40.859 Esc Key pressed. ( A Stage )
00:08:42.015 [KEY STATUS] Push Button Back Key

00:08:42.031  [SEQUENCE] Exec Sequence 1
00:08:42.046 #[SEQ1] Inspection Start !! [Model] D705 [S/W Ver : ] [H/W Ver : ] [Script Ver : D705[MP-3-N-FT57]-200316
00:08:43.406 [KEY STATUS] Push Button Back Key

00:08:43.421  [SEQUENCE] Exec Sequence 1
00:08:43.437 #[SEQ1] Inspection Start !! [Model] D705 [S/W Ver : ] [H/W Ver : ] [Script Ver : D705[MP-3-N-FT57]-200316
00:08:46.078 [KEY STATUS] Push Button Back Key

00:08:46.078  [SEQUENCE] Exec Sequence 1
00:08:46.093 #[SEQ1] Inspection Start !! [Model] D705 [S/W Ver : ] [H/W Ver : ] [Script Ver : D705[MP-3-N-FT57]-200316
00:08:47.468 [KEY STATUS] Push Button Back Key

00:08:47.468  [SEQUENCE] Exec Sequence 1
00:08:47.484 #[SEQ1] Inspection Start !! [Model] D705 [S/W Ver : ] [H/W Ver : ] [Script Ver : D705[MP-3-N-FT57]-200316
00:08:48.843 [KEY STATUS] Push Button Back Key

00:08:48.859  [SEQUENCE] Exec Sequence 1
00:08:48.875 #[SEQ1] Inspection Start !! [Model] D705 [S/W Ver : ] [H/W Ver : ] [Script Ver : D705[MP-3-N-FT57]-200316
00:08:50.234 [KEY STATUS] Push Button Back Key

00:08:50.250  [SEQUENCE] Exec Sequence 1
00:08:50.265 #[SEQ1] Inspection Start !! [Model] D705 [S/W Ver : ] [H/W Ver : ] [Script Ver : D705[MP-3-N-FT57]-200316

00:08:51.625  [SEQUENCE] Exec Sequence 2

w31575801

回复 32# flashercs


    已采纳，万分感谢

flashercs

回复 31# w31575801


    log中还有些行开头不是时间格式,里面还有叹号!

<#*,:&cls
@echo off
pushd "%~dp0"
powershell -NoProfile -ExecutionPolicy RemoteSigned -Command ". ([ScriptBlock]::Create((Get-Content -LiteralPath \"%~0\" -ReadCount 0 | Out-String ))) "
popd
pause
exit /b
#>
# 起始时间
$dtmBegin = "02:31:37.501"
# 终止时间
$dtmEnd = "03:42:00.140"
$logglob = "*.log"
$dtmLength = $dtmBegin.Length
$dtmFormat = "[0-9][0-9]:[0-9][0-9]:[0-9][0-9].[0-9][0-9][0-9]"
$buffer = 65536
# utf8-nobom
$encoding = New-Object System.Text.UTF8Encoding -ArgumentList @($false)
foreach ($logfile in (Convert-Path -Path $logglob | Where-Object { Test-Path -LiteralPath $_ -PathType Leaf })) {
  Write-Host $logfile -ForegroundColor Green
  try {
    $stream1 = New-Object System.IO.FileStream -ArgumentList @($logfile, [System.IO.FileMode]::Open, [System.IO.FileAccess]::Read, [System.IO.FileShare]::ReadWrite, $buffer)
    $stream2 = New-Object System.IO.FileStream -ArgumentList @($logfile, [System.IO.FileMode]::Open, [System.IO.FileAccess]::Write, [System.IO.FileShare]::Read, $buffer)
    $sr = New-Object System.IO.StreamReader -ArgumentList @($stream1, $encoding, $true, $buffer)
    $sw = New-Object System.IO.StreamWriter -ArgumentList @($stream2, $encoding, $buffer)
    $flag = $false
    while (!$sr.EndOfStream) {
      $strLine = $sr.ReadLine()
      $dtmStr = $strLine.Substring(0, [Math]::Min($dtmLength, $strLine.Length))
      if ($dtmStr -notlike $dtmFormat) {
        $sw.WriteLine($strLine)
        continue
      }
      if (!$flag) {
        if ($dtmStr -ge $dtmBegin) {
          if ($dtmStr -lt $dtmEnd) {
            $sw.WriteLine($strLine)
            $flag = $true
          } else {
            break
          }
        }
      } else {
        if ($dtmStr -lt $dtmEnd) {
          $sw.WriteLine($strLine)
        } else {
          $flag = $false
          break
        }
      }
    }
    $sw.Flush()
    $stream2.SetLength($stream2.Position)
  } catch {
    $_ | Write-Host -ForegroundColor Red
  } finally {
    if ($sr) {
      $sr.Dispose()
    }
    if ($sw) {
      $sw.Dispose()
    }
    if ($stream1) {
      $stream1.Dispose()
    }
    if ($stream2) {
      $stream2.Dispose()
    }
  }
}
复制代码

w31575801

回复 26# flashercs


    附件已上传 您再给看看编辑一下

w31575801

回复 25# qixiaobin0715


   附件已上传 您再给看看  这个时间段怎么改

w31575801

回复 26# flashercs


直接提示移动了一个文件 然后变成0KB了

w31575801

回复 19# flashercs


  前面格式发错了 使用之后直接变成0KB 大佬再给改改

went

start开始,end结束,相邻多个开始结束时间只会保存一个

@echo off & cd /d "%~dp0"
set "start=15:40:01.098"
set "end=15:45:45.870"
del *_NEW.log >nul 2>nul
for %%i in ("*.log") do call :splitLog "%%i"
pause&exit

:splitLog
set "start_line=0"
for /f "delims=:" %%a in ('findstr /b /r /n /C:"%start%" "%~1"') do set "start_line=%%a"
set /a "start_line-=1"
if not "%start_line%"=="-1" (
	(
		for /f "usebackq skip=%start_line% tokens=1*" %%i in ("%~1") do (
			echo %%i %%j
			if "%%i"=="%end%" goto :done
		)
	) > "%~n1_NEW.log"
)
:done
echo %~1 done.
echo -------------------------------------
复制代码

保存多个开始结束时间

@echo off & cd /d "%~dp0"
set "start=15:40:01.098"
set "end=15:45:45.870"
del *_NEW.log >nul 2>nul
for %%i in ("*.log") do call :splitLog "%%i"
pause&exit

:splitLog
set "start_line=0"
for /f "delims=:" %%a in ('findstr /b /r /n /C:"%start%" "%~1"') do set "start_line=%%a" & goto :startDone
:startDone
set /a "start_line-=1"
if not "%start_line%"=="-1" (
	(
		set "enterEnd=0"
		for /f "usebackq skip=%start_line% tokens=1*" %%i in ("%~1") do (
			if not "%%i"=="%end%" (
				call set /a "1/%%enterEnd%%" >nul 2>nul && goto :done || echo %%i %%j
			) else (
				echo %%i %%j
				if "%%i"=="%end%" set "enterEnd=1"
			)
		)
	) > "%~n1_NEW.log"
)
:done
echo %~1 done.
echo -------------------------------------
复制代码

flashercs

@echo off
setlocal EnableDelayedExpansion
cd /d "%~dp0"
set "dtmBegin=09:31:37:501"
set "dtmEnd=14:59:02:999"
set "file=~%random%~"
for %%A in ("*.log") do (
  >"%file%" call :filter "%%A"
  move /y "%file%" "%%A"
  REM >"[%dtmBegin::=;%-%dtmEnd::=;%].%%A" call :filter "%%A"
)
endlocal
pause
exit /b
:filter
set flag=0
for /f "usebackq tokens=1*" %%B in (%1) do (
    REM test the low boundary
    if "!flag!"=="0" (
      if "%%B" geq "%dtmBegin%" (
          if "%%B" lss "%dtmEnd%" (
            echo %%B %%C
            set flag=1
        ) else (
          goto next
        )
      )
    ) else (
    REM test the high boundary
      if "%%B" lss "%dtmEnd%" (
        echo %%B %%C
      ) else (
        set flag=0
        goto next
      )
    )
  )
  :next
  exit /b
复制代码

回复 22# w31575801

qixiaobin0715

整点之间的记录要简单点，比如你所说的8~17点，test.jsee：

editor.ReplaceInFiles( "^(0[0-7]|1[7-9]|2[0-3]):.*\\r\\n","",document.Path + "\\*.log", eeFindReplaceRegExp,eeEncodingSystemDefault,"","",eeExFindSeparateCRLF);
复制代码

qixiaobin0715

如果会使用EmEditor文本编辑器的话，处理文本的宏文件如下：

editor.ReplaceInFiles( "^00:00:00.001.*\\r\\n((?!09:34:04.989).*\\r\\n)+","",document.Path + "\\*.log", eeFindReplaceRegExp,eeEncodingSystemDefault,"","",eeExFindSeparateCRLF);
editor.ReplaceInFiles( "^09:34:07.247.*\\r\\n(.*\\r\\n)+","",document.Path + "\\*.log", eeFindReplaceRegExp,eeEncodingSystemDefault,"","",eeExFindSeparateCRLF);
复制代码

使用方法：
1.将代码保存为编码为"UTF-16LE”的文件test.jsee。
2.在源文件所在文件夹中新建一个空的txt文件，用EmEditor打开空文件，加载宏文件test.jsee，运行宏文件，即能在源文件上直接修改。
3.第一组数字为首行时间；第二组为保留的开始时间；第三组为保留的终止时间的下一行记录时间。
4.注意备份源文件，加载宏文件后，符合条件的文件夹内的所有.log文件都会被修改。
5.若需要7点之后，9点之前的记录，第二组数字改为07，第三组数字改为09，数字格式应与源文件保持一致，小时数00,01,...10...的格式，不能写成0,1,...，前面的0不能省略。

Batcher

回复 21# w31575801


截取 11:21:20.367 至 12:13:45.759 之间的内容：

sed -n "/11:21:20\.367/,/12:13:45\.759/p" "1.log" > "2.log"
复制代码

w31575801

回复 19# flashercs


    可以直接删掉时间段之前和之后的 比如直接删掉文件8：00之前，17:00之后，不生成新的Log 直接原Log里面修改吗？

w31575801

回复 20# Batcher


    已上传 Log日志格式跟这个一样的

Batcher

回复 18# w31575801


    请在顶楼提供一段日志文件（不是截图），我来写一下代码。