首页 > 试题广场 >

Nginx日志分析4-查询某个IP的详细访问情况

[编程题]Nginx日志分析4-查询某个IP的详细访问情况
  • 热度指数：8283 时间限制：C/C++ 1秒，其他语言2秒 空间限制：C/C++ 256M，其他语言512M
  • 算法知识视频讲解
假设Nginx的日志存储在nowcoder.txt里，内容如下： 
192.168.1.20 - - [21/Apr/2020:14:27:49 +0800] "GET /1/index.php HTTP/1.1" 404 490 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
192.168.1.21 - - [21/Apr/2020:15:27:49 +0800] "GET /2/index.php HTTP/1.1" 404 490 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
192.168.1.22 - - [21/Apr/2020:21:27:49 +0800] "GET /3/index.php HTTP/1.1" 404 490 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
192.168.1.23 - - [21/Apr/2020:22:27:49 +0800] "GET /1/index.php HTTP/1.1" 404 490 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
192.168.1.24 - - [22/Apr/2020:15:27:49 +0800] "GET /2/index.php HTTP/1.1" 404 490 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
192.168.1.25 - - [22/Apr/2020:15:26:49 +0800] "GET /3/index.php HTTP/1.1" 404 490 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
192.168.1.20 - - [23/Apr/2020:08:27:49 +0800] "GET /1/index.php HTTP/1.1" 404 490 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
192.168.1.21 - - [23/Apr/2020:09:20:49 +0800] "GET /1/index.php HTTP/1.1" 404 490 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
192.168.1.22 - - [23/Apr/2020:10:27:49 +0800] "GET /1/index.php HTTP/1.1" 404 490 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
192.168.1.22 - - [23/Apr/2020:10:27:49 +0800] "GET /1/index.php HTTP/1.1" 404 490 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
192.168.1.20 - - [23/Apr/2020:14:27:49 +0800] "GET /1/index.php HTTP/1.1" 404 490 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
192.168.1.21 - - [23/Apr/2020:15:27:49 +0800] "GET /2/index.php HTTP/1.1" 404 490 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
192.168.1.22 - - [23/Apr/2020:15:27:49 +0800] "GET /3/index.php HTTP/1.1" 404 490 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
192.168.1.25 - - [23/Apr/2020:16:27:49 +0800] "GET /1/index.php HTTP/1.1" 404 490 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
192.168.1.24 - - [23/Apr/2020:20:27:49 +0800] "GET /2/index.php HTTP/1.1" 404 490 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
192.168.1.25 - - [23/Apr/2020:20:27:49 +0800] "GET /3/index.php HTTP/1.1" 404 490 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
192.168.1.20 - - [23/Apr/2020:20:27:49 +0800] "GET /1/index.php HTTP/1.1" 404 490 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
192.168.1.21 - - [23/Apr/2020:20:27:49 +0800] "GET /1/index.php HTTP/1.1" 404 490 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
192.168.1.22 - - [23/Apr/2020:20:27:49 +0800] "GET /1/index.php HTTP/1.1" 404 490 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
192.168.1.22 - - [23/Apr/2020:22:27:49 +0800] "GET /1/index.php HTTP/1.1" 404 490 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
192.168.1.21 - - [23/Apr/2020:23:27:49 +0800] "GET /1/index.php HTTP/1.1" 404 490 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
现在需要编写shell脚本查询192.168.1.22的详细访问次数情况，按访问频率降序排序。你的脚本应该输出： 
4 /1/index.php
2 /3/index.php

输入描述:
1


输出描述:
1
示例1

输入

192.168.1.20 - - [21/Apr/2020:14:27:49 +0800] "GET /1/index.php HTTP/1.1" 404 490 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
192.168.1.21 - - [21/Apr/2020:15:27:49 +0800] "GET /2/index.php HTTP/1.1" 404 490 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
192.168.1.22 - - [21/Apr/2020:21:27:49 +0800] "GET /3/index.php HTTP/1.1" 404 490 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
192.168.1.23 - - [21/Apr/2020:22:27:49 +0800] "GET /1/index.php HTTP/1.1" 404 490 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
192.168.1.24 - - [22/Apr/2020:15:27:49 +0800] "GET /2/index.php HTTP/1.1" 404 490 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
192.168.1.25 - - [22/Apr/2020:15:26:49 +0800] "GET /3/index.php HTTP/1.1" 404 490 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
192.168.1.20 - - [23/Apr/2020:08:27:49 +0800] "GET /1/index.php HTTP/1.1" 404 490 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
192.168.1.21 - - [23/Apr/2020:09:20:49 +0800] "GET /1/index.php HTTP/1.1" 404 490 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
192.168.1.22 - - [23/Apr/2020:10:27:49 +0800] "GET /1/index.php HTTP/1.1" 404 490 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
192.168.1.22 - - [23/Apr/2020:10:27:49 +0800] "GET /1/index.php HTTP/1.1" 404 490 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
192.168.1.20 - - [23/Apr/2020:14:27:49 +0800] "GET /1/index.php HTTP/1.1" 404 490 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
192.168.1.21 - - [23/Apr/2020:15:27:49 +0800] "GET /2/index.php HTTP/1.1" 404 490 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
192.168.1.22 - - [23/Apr/2020:15:27:49 +0800] "GET /3/index.php HTTP/1.1" 404 490 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
192.168.1.25 - - [23/Apr/2020:16:27:49 +0800] "GET /1/index.php HTTP/1.1" 404 490 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
192.168.1.24 - - [23/Apr/2020:20:27:49 +0800] "GET /2/index.php HTTP/1.1" 404 490 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
192.168.1.25 - - [23/Apr/2020:20:27:49 +0800] "GET /3/index.php HTTP/1.1" 404 490 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
192.168.1.20 - - [23/Apr/2020:20:27:49 +0800] "GET /1/index.php HTTP/1.1" 404 490 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
192.168.1.21 - - [23/Apr/2020:20:27:49 +0800] "GET /1/index.php HTTP/1.1" 404 490 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
192.168.1.22 - - [23/Apr/2020:20:27:49 +0800] "GET /1/index.php HTTP/1.1" 404 490 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
192.168.1.22 - - [23/Apr/2020:22:27:49 +0800] "GET /1/index.php HTTP/1.1" 404 490 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
192.168.1.21 - - [23/Apr/2020:23:27:49 +0800] "GET /1/index.php HTTP/1.1" 404 490 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"

输出

4 /1/index.php
2 /3/index.php
算法知识视频讲解
查看答案及解析
添加回答
Bash
Charseki头像 Charseki 
#!/bin/bash

declare -A map

while read line; do
    arr=($line)
    if [[ ${arr[0]} =~ 192.168.1.22 ]]; then
        ((map["${arr[6]}"]++))
    fi
done < nowcoder.txt

for ip in ${!map[@]}; do
    echo ${map[${ip}]}' '${ip}
done | sort -nr

发表于 2023-10-12 15:52:40 回复(0)
bash
吃鸡是吃不到的头像 吃鸡是吃不到的
cat nowcoder.txt |grep 192.168.1.22|awk '{print $7}'|sort|uniq -c |sed -e 's/^ *//'
发表于 2023-08-17 21:25:25 回复(0)
bash
Halo653224头像 Halo653224

cat nginx_ip04.txt  | grep 192.168.1.22 | awk '{print $7}' | sort | uniq -c

发表于 2023-06-23 23:03:44 回复(0)
Bash
牛客935924829号头像 牛客935924829号 
grep '192.168.1.22' nowcoder.txt|awk '{print $7}'|sort|uniq -c|awk '{print $1,$2}'
发表于 2022-09-14 16:33:46 回复(0)
Bash
牛客995180755号头像 牛客995180755号

awk数组+sort

awk '{
    if($1 ~ /192\.168\.1\.22/){
        a[$7]++
    }
}
END{
    for(i in a){
        print(a[i]" "i)
    }    
}' nowcoder.txt | sort -nr
发表于 2022-08-27 22:50:34 回复(0)
Bash
久梦柒头像 久梦柒
 awk '/^192.168.1.22/{ip[$7]++}END{for(i in ip) print ip[i],i}' nowcoder.txt|sort -r

发表于 2022-08-22 16:58:26 回复(0)
Bash
牛客190660620号头像 牛客190660620号 
grep "192.168.1.22" nowcoder.txt | awk '{print $7}' |  sort -k 1,1 | uniq -c | awk '{print $1,$2}'

发表于 2022-08-11 20:21:02 回复(0)
Bash
牛客717186338号头像 牛客717186338号
grep -E "192.168.1.22"|awk -F " " '{print $7}'|sort|uniq -c|awk '{print $1,$2}' 继续生产垃圾代码
发表于 2022-07-29 10:17:41 回复(0)
Bash
温柔有点恬头像 温柔有点恬
grep '192.168.1.22' nowcoder.txt | cut -d " " -f 7 | sort | uniq -c | sort -r | awk '{print $1,$2}'
发表于 2022-07-26 18:54:23 回复(0)
Bash
河边小石子头像 河边小石子 
awk '$1~/192.168.1.22/{print $7}' nowcoder.txt|awk '{a[$1]+=1}END{for(i in a)print a[i],i}'|sort -rn
发表于 2022-07-25 22:22:06 回复(0)
Bash
科学养兔头像 科学养兔
grep '192.168.1.22'|awk '{print $7}'|sort|uniq -c|awk '{print $1,$2}'
发表于 2022-07-21 14:18:41 回复(0)
Bash
麦子小肥头像 麦子小肥
sed -n '/192.168.1.22/p' nowcoder.txt|awk '{print $7}'|sort|uniq -c|xargs -n2
发表于 2022-07-01 15:38:24 回复(0)
Bash
已注销头像 已注销 
awk '$1=="192.168.1.22"{print $7}'|sort|uniq -c|sed 's/^ *//g'

发表于 2022-06-24 15:28:34 回复(0)
Bash
Liypoi头像 Liypoi 
awk '/192.168.1.22/{print $7}' nowcoder.txt | sort | uniq -c | awk '{print $1,$2}'

发表于 2022-06-11 19:56:13 回复(0)
Bash
JianYue头像 JianYue
awk -F " " '{if($1=="192.168.1.22") sum[$7]+=1}END{for(x in sum){
    print sum[x], x
}}' | sort -r -k 1
发表于 2022-05-10 18:50:57 回复(0)
Bash
可爱的考拉头像 可爱的考拉 
awk '{if($1=="192.168.1.22") a[$7]++} END{for(i in a) print a[i],i}'|sort -r

发表于 2022-04-23 16:26:04 回复(0)
Bash
牛客肖头像 牛客肖
awk -F " " '{if($1=="192.168.1.22"){list[$7]++}}
END{for (i in list){print list[i] " " i}}' |sort -r
发表于 2022-03-27 20:22:15 回复(0)
Bash
罗大昭头像 罗大昭
grep '192.168.1.22' nowcoder.txt|awk -F "GET " '{print $2}'|awk -F "index.php" '{
print $1}'|sort|uniq -c|sort -r|awk '{print $1" "$2"index.php"}'

发表于 2022-03-22 21:26:16 回复(0)
Bash
Kbob头像 Kbob
grep 192.168.1.22 nowcoder.txt | awk '{print $7}' | sort | uniq -c | sed 's/^[ \t]*//g'
发表于 2022-03-01 19:27:22 回复(0)
提交观点

问题信息

shell
难度：
33条回答 988浏览

热门推荐

通过挑战的用户

查看代码

相关试题

Nginx日志分析4-查询某个IP的详细访问情况

扫一扫，把题目装进口袋

求职之前，先上牛客

扫描二维码，进入QQ群

扫描二维码，关注牛客公众号