topic Re: Perl equivalent needed in Operating System - HP-UX

Perl equivalent needed

Allanm — Tue, 19 Apr 2011 20:29:08 GMT

For the following command I need a perl equivalent with a couple of more things -

cat /tmp/mail |grep Appname > /tmp/mail1;cat /tmp/mail >> /tmp/mail1; mail -s "mail subject here" allan@mail.com < /tmp/mail1; >/tmp/mail ; >/tmp/mail1

==================
cat /tmp/mail

***** Alert *****

Notification Type: PROBLEM

Appname: flle system
Host: localhost
Address: 127.0.0.1
State: CRITICAL

Date/Time: Tue Apr 19 13:01:03 PDT 2011

Additional Info:

(Return code of 127 is out of bounds - plugin may be missing)

Console : http://URL
***** Alert *****

Notification Type: PROBLEM

Appname: Appname1
Host: remotehost.domain.com
Address: x.x.x.x
State: CRITICAL

Date/Time: Tue Apr 19 13:27:13 PDT 2011

Additional Info:

Connection refused

Console http://URL

===========

Want to create a Perl script which does a cat on /tmp/mail and egrep for "Appname|Date" and gives an output like this:

Tue Apr 19 13:01:03 PDT 2011 : flle system
Tue Apr 19 13:27:13 PDT 2011 : Appname1

and then send this output to my email address and finally empty out the file(s).

Re: Perl equivalent needed

Allanm — Tue, 19 Apr 2011 20:32:33 GMT

A script rather than a one liner please.

Thanks,
Allan.

Re: Perl equivalent needed

James R. Ferguson — Tue, 19 Apr 2011 23:05:08 GMT

Hi Allanm:

This will get the fields you want. You can redirect the output to a file or you can store it in a variable. While we could write the whole set of code in Perl, I'll leave that as an exercise for you :-)

# perl -nle 'chomp;$name=$1 if m{^Appname:\s*(.+)};print "$1 $name" if m{^Date/Time:\s*(.+)}' file
Tue Apr 19 13:01:03 PDT 2011 flle system
Tue Apr 19 13:27:13 PDT 2011 Appname1

Regards!

...JRF...

Re: Perl equivalent needed

Allanm — Wed, 20 Apr 2011 05:40:25 GMT

Thanks JRF, forgot to mention , In addition, I need to append the original alerts to the bottom of the date:appname text -

Tue Apr 19 13:01:03 PDT 2011 : flle system
Tue Apr 19 13:27:13 PDT 2011 : Appname1

***** Alert *****

Notification Type: PROBLEM

Appname: flle system
Host: localhost
Address: 127.0.0.1
State: CRITICAL

Date/Time: Tue Apr 19 13:01:03 PDT 2011

Additional Info:

(Return code of 127 is out of bounds - plugin may be missing)

Console : http://URL

***** Alert *****

Notification Type: PROBLEM

Appname: Appname1
Host: remotehost.domain.com
Address: x.x.x.x
State: CRITICAL

Date/Time: Tue Apr 19 13:27:13 PDT 2011

Additional Info:

Connection refused

Console http://URL

It will take me time to come up with a script but I am working.

Regards,
Allan.

Re: Perl equivalent needed

Hakki Aydin Ucar — Wed, 20 Apr 2011 07:05:01 GMT

simplified version as alternative calling from a shell ;

#!/usr/bin/ksh
/path-to-perl/perl -ne 'print if /Appname/|/Date/' /tmp/mail >
/tmp/mail_problem

Re: Perl equivalent needed

Allanm — Wed, 20 Apr 2011 19:10:17 GMT

Hi JRF,Others!

I have made the following script -

#!/usr/bin/perl

use strict;

my ($app,$cmd);
open(FH,"<","/tmp/mail") or die "Fail- $!\n";
open(FW,">","/tmp/mail_test") or die "Fail- $!\n";
while() {
chomp;
if(/Appname:(.*)/) { $app=$1; }
if (/Date\/Time:(.*)/) { printf FW "%s:%s\n",$1,$app; }
}

$cmd='mail -s "mail subject here" allan@mail.com < /tmp/mail_test 2>/tmp/error_mail';
system($cmd);
if ( $? ne 0 ) { die "Failure - while sending email. Please check file /tmp/error_mail \n"; }
close(FW);
close(FH);

Please review and let me know of any pitfall(any stale filhandle).

In addition to Date/Appname, I am struggling a bit with printing rest of the alert text after printing Date/Appname.. Can you help?

Thanks,
Allan.

Re: Perl equivalent needed

Allanm — Wed, 20 Apr 2011 19:15:34 GMT

I have also added delete(un-link) to the bottom of script to clean up the file(s).

close(FW);
close(FH);

unlink "/tmp/mail" or warn "Could not delete email: $!";; ;

Re: Perl equivalent needed

Allanm — Wed, 20 Apr 2011 21:06:33 GMT

Additionally can we also get host as well, so the alert should look like -

======
Appname1:remotehost.domain.com:Tue Apr 19 13:27:13 PDT 2011
...

***** Alert *****

Notification Type: PROBLEM

Appname: flle system
Host: localhost
Address: 127.0.0.1
State: CRITICAL

Date/Time: Tue Apr 19 13:01:03 PDT 2011

Additional Info:

(Return code of 127 is out of bounds - plugin may be missing)

Console : http://URL
***** Alert *****

Notification Type: PROBLEM

Appname: Appname1
Host: remotehost.domain.com
Address: x.x.x.x
State: CRITICAL

Date/Time: Tue Apr 19 13:27:13 PDT 2011

Additional Info:

Connection refused

Console http://URL

Thanks,
Allan.

Re: Perl equivalent needed

Hein van den Heuvel — Wed, 20 Apr 2011 21:40:44 GMT

>> Additionally can we also get host as well, so the alert should look like -

======
Appname1:remotehost.domain.com:Tue Apr 19 13:27:13 PDT 2011

This is where YOU try to really understand how the appname came to be, and replicate for the host.

(Untested!) solution below:

hth,
Hein

Instead of

> if(/Appname:(.*)/) { $app=$1; }
> if (/Date\/Time:(.*)/) { printf FW "%s:%s\n",$1,$app; }
}

try (saving 4 bytes on first line :^) :

$app = $1 if /Appname:(.*)/;
$host = $1 if /^Host:(.*)/;
if (/Date\/Time:(.*)/) { printf FW "%s:%s:%s\n",$app,$host,$1; }
}

Re: Perl equivalent needed

Allanm — Wed, 20 Apr 2011 22:06:20 GMT

That worked! Thanks,

Last thing I need is to append all alerts to the bottom of this list.So something like this -

Tue Apr 19 13:01:03 PDT 2011 : flle system:Host
Tue Apr 19 13:27:13 PDT 2011 : Appname1:Host

***** Alert *****

Notification Type: PROBLEM

Appname: flle system
Host: localhost
Address: 127.0.0.1
State: CRITICAL

Date/Time: Tue Apr 19 13:01:03 PDT 2011

Additional Info:

(Return code of 127 is out of bounds - plugin may be missing)

Console : http://URL
***** Alert *****

Notification Type: PROBLEM

Appname: Appname1
Host: remotehost.domain.com
Address: x.x.x.x
State: CRITICAL

Date/Time: Tue Apr 19 13:27:13 PDT 2011

Additional Info:

Connection refused

Console http://URL

Regards,
Allan.

Re: Perl equivalent needed

Allanm — Wed, 20 Apr 2011 22:32:47 GMT

Tried $_ but I am not getting what I want.

Thanks,
Allan.

Re: Perl equivalent needed

Hein van den Heuvel — Wed, 20 Apr 2011 22:34:53 GMT

Hmmm, not sure exactly what you want, and not sure what you tried with $_ but maybe this helps?

To attach all the original message lines you basically have 2 choices.

1) stash them all in an array as you process, then print that array after printing the headlines.

2) after gathering and printing the headlines, re-read the source and print to log

1)

while() {
push @everything, $_;
chomp;
$app = $1 if /Appname:(.*)/;
$host = $1 if /^Host:(.*)/;
if (/Date\/Time:(.*)/) { printf FW "%s:%s:%s\n",$app,$host,$1; }
}
print FW @everything;
$cmd='mail ...

2)

while() {
chomp;
$app = $1 if /Appname:(.*)/;
$host = $1 if /^Host:(.*)/;
if (/Date\/Time:(.*)/) { printf FW "%s:%s:%s\n",$app,$host,$1; }
}
seek FH,0,0; # back to the beginning
print FW ; # dump it all

$cmd='mail...

my tests....
# cat x.txt
aap
test: xxx
noot
test: yyy
mies

1) # perl -e "open X,qq() {push @everything,$_; print if /test/} print @everything"

2) # perl -e 'open X,qq() {print if /test/}; seek X,0,0; print '

both giving:
test: xxx
test: yyy
aap
test: xxx
noot
test: yyy
mies

Good luck!
Hein