I need some help to get the time stamps from the Unix logs. Basically I am want to analyze which step is taking more time. Please give me some inputs. Thanks a lot for your help.
I have got different codes for each for phase as we can see in the logs
What have you tried to solve this problem on your own?
Given that you have two "TPLD Starting" events at the start of your log file (marked above in red) and one "TPLD Ending" event (marked in blue), why are the timestamps on the TPLD activity in your output from the two Starting events instead of the "START_TIME" coming from one of the Starting events and the "END_TIME" coming from the Ending event? If you have two starting events with only one ending event, why did you choose to use the first starting event timestamp instead of the second starting event timestamp? (I.e., if the activity was restarted, why not choose the restart time instead of the time that never completed?)
I tried grep the lines for every phase but its becoming a complex program as I had different other phases as well.
I am using Linux and korn shell. Anytime 01182018 100009, 01182018 100010 works for me to know TPLD completion. 01182018 100009 more accurate, since 01182018 100010 has a different code I have choosed.
This doesn't actually tell us what you have tried. Can you post your attempts and output/errors into the thread wrapped in CODE tags please. Then we might be able to make suggestions.
In addition to what Robin has already said, you need to explain MUCH more clearly how you want to specify rules that govern the extraction of the start and end times for TPLD events. You gave ambiguous requirements in your first post, but your sample output doesn't even meet those requirements. You say that are are using "a different code that I have choosed (sic)."
I have an awk script that seems to meet your written requirements, but it doesn't work at all in producing your desired output for TPLD transactions; it only produces your desired output for UPDT transactions.