crash-reporter/kernel_log_collector.sh

#!/bin/sh

# Copyright (c) 2013 The Chromium OS Authors. All rights reserved.
# Use of this source code is governed by a BSD-style license that can be
# found in the LICENSE file.

# Usage example: "kernel_log_collector.sh XXX YYY"
# This script searches logs in the /var/log/messages which have the keyword XXX.
# And only those logs which are within the last YYY seconds of the latest log
# that has the keyword XXX are printed.

# Kernel log has the possible formats:
# 2013-06-14T16:31:40.514513-07:00 localhost kernel: [    2.682472] MSG MSG ...
# 2013-06-19T20:38:58.661826+00:00 localhost kernel: [    1.668092] MSG MSG ...

search_key=$1
time_duration=$2
msg_pattern="^[0-9-]*T[0-9:.+-]* localhost kernel"

die() {
  echo "kernel_log_collector: $*" >&2
  exit 1
}

get_timestamp() {
  timestamp="$(echo $1 | cut -d " " -f 1)"
  timestamp="$(date -d "${timestamp}" +%s)" || exit $?
  echo "${timestamp}"
}

last_line=$(grep "${msg_pattern}" /var/log/messages | grep -- "${search_key}" | tail -n 1)

if [ -n "${last_line}" ]; then
  if ! allowed_timestamp=$(get_timestamp "${last_line}"); then
    die "coule not get timestamp from: ${last_line}"
  fi
  : $(( allowed_timestamp -= ${time_duration} ))
  grep "${msg_pattern}" /var/log/messages | grep -- "${search_key}" | while read line; do
    if ! timestamp=$(get_timestamp "${line}"); then
      die "could not get timestamp from: ${line}"
    fi
    if [ ${timestamp} -gt ${allowed_timestamp} ]; then
      echo "${line}"
    fi
  done
fi

echo "END-OF-LOG"