clfsplit(1)
π clfsplit β bestie edition π
okay so this is clfsplit from the logtools squad, manual section 1 π and it's literally the girl who takes your giant messy web logs and separates them by IP address. main character energy fr.
β¨ SYNOPSIS β¨
clfsplit [--help] [-i input] -d defaultfile -f file -s spec [-f file -s spec]
yes bestie, you can stack -f file -s spec pairs as many times as your heart desires π
πΈ DESCRIPTION πΈ
so clfsplit splits up large CLF format web logs based on IP address. that's it, that's the job. it exists so you can make separate log analysis passes for internal and external users of web pages π¦ no cap, that's the whole reason.
π OVERVIEW π
okay let's walk through it, stay with me π«Ά
- the
defaultfileparameter says where data goes if it doesn't match any of the IP ranges. ngl, this could totally be/dev/nulldepending on your aims π like if you literally do not care about the leftovers. - the
-i inputparameter gives the file to take input from β and the default is standard input β¨ - the
-f fileparameter must be given before the list of IP addresses. it's giving "order matters, bestie" π - the
specparameter is the IP addresses that go to the file in question π. it's of the form:
start[-end][:start[-end]]
where start and end specify the start and ends of ranges of IPs π. also the CIDR notation can be used, or just a single IP address π
. and if there's a large number of IP ranges then you can hand over a file name which contains a set of IP ranges, one range per line π iconic.
π EXIT STATUS π
like, the vibe check at the end. here's what the numbers mean:
0β No errors π slay, we ate1β Bad parameters π2β Can't open input π3β Can't open/write to output file π4β Can't open and read from spec file π«
π AUTHOR π
This program, its manual page, and the Debian package were written by Russell Coker <russell@coker.com.au> πΈ
π¦ SEE ALSO π¦
k bye bestie, go split some logs π this whole thing is by Russell Coker <russell@coker.com.au>, version 0.06, and it's a clfsplit(1) moment fr fr β¨ππ
π¦ where this page comes from
- debian bookworm: logtools 0.13e+nmu2
- debian trixie: logtools 0.13e+nmu3 Β· GPL-2.0-only
- ubuntu jammy: logtools 0.13e+nmu2
- ubuntu noble: logtools 0.13e+nmu2
- ubuntu questing: logtools 0.13e+nmu3
- ubuntu resolute: logtools 0.13g Β· GPL-2.0-only
- ubuntu stonking: logtools 0.13g Β· GPL-2.0-only
- π girlified by deepseek-ai/DeepSeek-V4.1-Flash on : a language model's rewrite of the original, under its terms