#!/usr/bin/perl open OUT, ">>/mnt/syslog/scripts/accessed_url.txt"; while () { $line = $_; if ($line =~ /Accessed URL/) { foreach $arg (@ARGV) { if ($line =~ /$arg/) { # Jun 8 03:28:23 10.99.0.250 %ASA-5-304001: 192.168.64.240 Accessed ($TIME, $IP, $URL) = $line =~ /(.*) 10.99.0.250 %ASA-5-304001: ([^ ]*) Accessed URL [^ ]*:(http:\/\/[^\/]*)/; ($sec,$min,$hour,$mday,$mon,$year,$wday,$yday,$isdst) = localtime(time); #printf OUT "%4d.%02d.%02d %02d:%02d:%02d %-15s %s\n", $year+1900, $mon+1, $mday, $hour, $min, $sec, $IP, $URL; #printf "%4d.%02d.%02d %02d:%02d:%02d %-15s %s\n", $year+1900, $mon+1, $mday, $hour, $min, $sec, $IP, $URL; printf OUT "%s %-15s %s\n", $TIME, $IP, $URL; } } } } close OUT;