Скрипт парсинга syslog

#!/bin/bash
awk -v dn=$(date --date "-$1" +%s) '{
        cmd = "date -d \""$3"\" +%s"
        cmd | getline d
        close(cmd)
        if(d<dn)print $1,$2,$3,$4,$5,$NF
}' log

./test 20minute
./test 5hour
./test 2day

#!/bin/bash
awk -v dn=$(date --date "-$1" +%s) '{
        cmd = "date -d \""$1" "$2" "$3"\" +%s"
        cmd | getline d
        close(cmd)
        if(d>dn)print $1,$2,$3,$4,$5,$NF
}' log

grep testuser syslog

#!/bin/bash
awk -v dn=$(date --date "-$1" +%s) -v pt="$2" \
       '$0 ~ pt {
        cmd = "date -d \""$1" "$2" "$3"\" +%s"
        cmd | getline d
        close(cmd)
        if(d>dn)print $1,$2,$3,$4,$5,$NF
}' log

./test 2day testuser

#!/bin/bash
awk -v dp="$(date --date "-$1" +%d%H:%M:%S)" \
        -v pt="$2" '$0 ~ pt {
        if(gensub(/^[0-9]$/, "0&", 1, $2)$3 > dp) \
        print $1,$2,$3,$4,$5,$NF
}' log

./test 3day root

#!/bin/bash
dp="$(date --date "-$1" +%d%H%M%S)"
while read m d t host com buf; do
        if [[ $buf =~ "$2" ]]; then
                var="0$d"
                if [ $dp \< "${var: -2}${t//[^0-9]}" ]; then
                        echo "$m $d $t $host $com ${buf##* }"
                fi
        fi
done < log

#!/bin/bash
dp="$(date --date "-$1" +%s)"
while read m d t host com buf; do
        if [[ $buf =~ "$2" ]]; then
                if [ "$(date -d "$m $d $t" +%s)" -gt "$dp" ]; then
                        echo "$m $d $t $host $com ${buf##* }"
                fi
        fi
done < log

./script 20minute testuser
./script 1week root
./script 2month #для второго скрипта
./script 5day

if [[ $buf =~ "$2" ]]; then

if [[ "${buf,,}" =~ "${2,,}" ]]; then