用于解析 aws elb 日志的猪脚本

Question

我正在尝试用 pig 解析这个 elb 日志，我能够使用这个脚本成功解析它

+++++++++++++++++++++++++++++++++++++++++++++ +++++++++++++++++++++++++++++++ 2016-07-16T00:00:41.700161Z testelb 11.11.17.2:50883 192.168.1.94:80 0.00002 0.001392 0.000019 200 200 0 43 "GET http://test.example.com:80/bac?aid=b5cf542d74&cid=etrsewtp&bid=23c45c543&dte=Sat%20Jul%2016%202016%2008:00:41%20GMT+0800%20(HKT) HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 9_3_2 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Mobile/13F69" - - ++++++++++++++++++++++++++++++++++++++++++++++++++++ +++++++++++++++++++++++

***************************************************************
A = LOAD '/tmp/one.log' USING TextLoader AS (line:chararray);

B = FOREACH A GENERATE FLATTEN (
    REGEX_EXTRACT_ALL(
            line,'^(\S+) (\S+) (\S+) (\S+) (\S+) (\S+) (\S+) (\S+) (\S+) (\S+) (\S+) "(.+?)" "(.+?)" (\S+) (\S+)')
    ) AS (
    timestamp:chararray, elb:int, client_port:chararray, backend_port:chararray, request_processing_time:float, backend_processing_time:float, response_processing_time:float, elb_status_code:int, backend_status_code:int, received_bytes:int, sent_bytes:int, request:chararray, user_agent:chararray, ssl_cipher:chararray, ssl_protocol:chararray
);

DUMP B;

现在我想提取请求 url、aid、bid、cid 等但无法匹配正则表达式。有人可以帮我获取这些详细信息吗？

除了上面的正则表达式方法，如果有任何其他方法可以获取完整的 elb 日志详细信息，那么我想知道。

注意：aid、bid、cid在请求日志中的位置不固定。

Answer 1

您的问题已经得到解答

Alternate way to do the same task 需要自定义加载程序。

用于解析 aws elb 日志的猪脚本

pig script to parse aws elb log

hadoop

apache-pig

hadoop2