Tool to correlate logs by timestamp

log-filesloggingshell-scripting

I have various log files, some with the same format (webserver + webserver SSL), some with different formats and even different timestamps.

How can I correlate these log files together in a simple console tool?

Bonus question: Some logs might not have a timestamp in every line, such as exception logs – that start with a time stamp, followed by the exception:

2012-11-12T10:16:38+00:00 ERR (3): 
exception 'Exception' with message 'joinAttribute not implemented' in /var/foo/Bar.php:123
Stack trace:

Best Answer

You can use Simple Event Correlator (SEC) for this.

http://simple-evcorr.sourceforge.net/

Related Topic