time filtering with -t
Wolfgang Barth
wob at swobspace.de
Sat Apr 7 10:19:53 EDT 2007
Hi,
I have some problems with -t.
% ra -r /var/log/argus/argus.log -s stime ltime dur -t -60M
StartTime LastTime Dur
2007-04-07 14:59:11 2007-04-07 15:00:06 54.765503
2007-04-07 14:59:15 2007-04-07 15:00:14 59.003147
=> correct.
but:
% ra -r /var/log/argus/argus.log -s stime ltime dur -t -60M
StartTime LastTime Dur
2007-04-06 23:59:02 2007-04-06 23:59:02 0.022146
2007-04-06 23:59:03 2007-04-06 23:59:03 0.103231
=> should be the same.
% ra -R /var/argus/archive/2007/04 -r /var/log/argus/argus.log \
-s stime ltime dur -t -1H
StartTime LastTime Dur
2007-04-06 22:59:13 2007-04-06 23:00:12 59.156147
2007-04-06 22:59:20 2007-04-06 23:00:20 59.230412
=> wrong. It is the last hour from -R data, -r argus.log is ignored.
% ra -R /var/argus/archive/2007/04 -r /var/log/argus/argus.log \
-s stime ltime dur -t -2d
=> no output. There is definitive data from all days since 2007-04-01 in
the directory /var/argus/archive/2007/04.
And what is about -t -5M+30M? It shows records from the past thirty
minutes. What is the expected behavior? The current one, or only the past 5
minutes?
Regards,
Wolfgang
--
<wob (at) swobspace de> * http://www.swobspace.de
More information about the argus
mailing list