splunk search commands

Find command and hardware information viewing is the most common system management and maintenance operations. Below is a brief comparison of basic Linux search commands, and lists some common hardware information to view commands.Man common options-k 知道功能、不知道名称-f 知道名称、不知道功能Comparison of various find commandswhereis 查找命令的可执行文件、源文件、man page路径whatis 读取命令的描述apropos

Whereis Useradd Find the location of the command Useradd and also find out where its Help file is located whereis rm Find the location of the command RM, and also find out where its Help files are locatedWhereis passwd View passwd file location, in fact here will find passwd command and passwd configuration file two file location, already their respective Help file locationIn Linux systems, it is common to see that ****.1.gz is the help of commands,

the primary key must be unique to identify each record, such as student's number2) Primary key is also an index, the primary key to find records faster3) If the primary key is an integer type, the value of the column can grow automaticallyNot null-non-null:Constraint column record cannot be empty, otherwise an errorUnique-Single:The value of the data that constrains the other columns is unique except for the primary keyCheck-condition checking:The value that constrains the column must meet the

1.find$ find. -name ' nginx* '$ find. -name ' nginx* '-ls$ find. -type f-mmin-10Searches the current directory for all the normal files that have been updated in the last 10 minutes. If you do not add the-type f parameter, search for normal files + special files + directories.2. LocateLocate is another way of writing "Find-name", searching the Database (/var/lib/locatedb). The Linux system automatically creates this database and updates it automatical

change the permissions or properties, Mtime will not change, this is the difference with CTime-mtime-n +n #按文件更改时间来查找文件,-n means n days or less, +n means n days ago　Status Time (CTime)This time is updated only if the properties or permissions of the file are updated, and the time is not updated when the content is changed.　-ctime-n +n #按文件创建时间来查找文件,-n means n days or less, +n means n days ago　　　　Accesstime (atime)Atime: Access time, which is the time at which the file was last read -atime-n +n

.png-wh _50 "/># # #3. cut###Cut # #截取字符cut-d Delimiter # #指定分隔符Cut-f 1,7 # #显示制定的列Cut-c 1-4 # #显示指定的字符# # #4. sort### # #排序Cp/etc/passwd/mntvim/mnt/passwdSort-n # #纯数字排序-U # #去冗余|UNIQ-C # #去除冗余并统计冗余次数-T # #指定分隔符-K # #制定列# # #5. uniq###Sort file |uniq-c # #去除冗余并统计冗余次数-D # #显示冗余行-U displays unique rows# # #6. sed###Sed ' s/original character/replacement character/g ' fileSed-e ' policy '-e ' strategy 2 ' fileSed-i File # #把转换后的内容输入到指定文件Sed ' 3,5s/meta character/replacement character/g ' # #3-5 li