I am sorry to repost this question. it was not clear, and I had the meeting and didn't response the question on time. I do really need help and appreciate your help very much.
I'm looking for a simple shell script that will read lots of audit log file (*.aud) in a log fold every 10 minutes, and will output to one file based on system date - 10 minutes. assume the script is run at 11:12:20, and it
should grep the line from Wed Jun 17 11:02:43 2009 to end of file. after 10 minutes (11:22:20), the script is run again, and it will grep lines Wed Jun 17 11:22:20 2009 to end of file. the audit log files are continually written, and we like to get audit log info from log files every 10 minutes, but no duplicated info every time we grep.
here is sample content of one audit log file. the format is show below (timestamps and entries on separate lines
and is there blank line between entries).
Wed Jun 17 11:02:16 2009
SESSIONID: "5649284" ENTRYID: "4" STATEMENT: "2" USERID: "USER_MEDFORM_RECEIVE" USERHOST: "PLACEWORDSHQ\NETAPP-DEV"
TERMINAL: "NETAPP-DEV" ACTION: "3" RETURNCODE: "0" OBJ$CREATOR: "MEDFORM" OBJ$NAME: "PM_DOC_INSERTS" OS$USERID:
"NETWORK?SERVICE"
Wed Jun 17 11:02:43 2009
SESSIONID: "5649284" ENTRYID: "5" STATEMENT: "4" USERID: "USER_MEDFORM_RECEIVE" USERHOST: "PLACEWORDSHQ\NETAPP-DEV"
TERMINAL: "NETAPP-DEV" ACTION: "3" RETURNCODE: "0" OBJ$CREATOR: "MEDFORM" OBJ$NAME: "MEDICAL_RECEIVE_QUEUE"
OS$USERID: "NETWORK?SERVICE"
Wed Jun 17 11:02:43 2009
SESSIONID: "5649284" ENTRYID: "6" STATEMENT: "4" USERID: "USER_MEDFORM_RECEIVE" USERHOST: "PLACEWORDSHQ\NETAPP-DEV"
TERMINAL: "NETAPP-DEV" ACTION: "3" RETURNCODE: "0" OBJ$CREATOR: "MEDFORM" OBJ$NAME: "PM_DOC_INSERTS" OS$USERID:
"NETWORK?SERVICE"
thanks
jack