BEGIN { F="\t" ; FS="\t"; OFS=";"; c=0 print "clientIP", "csusername", "Fdate", "Ftime", "ThreatName", "csuri" ,"csreferred" > server"_Report_Virus_"date".csv" print "clientIP", "csusername", "Fdate", "Ftime", "csuri", "rip" > server"_Internet_Trafic_"date".csv" } NR == 4 { for (i=1;i<=NF;i++) { if ($i=="MalwareInspectionThreatLevel" ) { MalwareLevel=i } if ($i=="#Fields: c-ip" ) { clientIP=i } if ($i~/date/) { Fdate=i } if ($i=="time" ) { Ftime=i } if ($i=="cs-referred" ) { csreferred=i } if ($i=="cs-username" ) { csusername=i } if ($i=="ThreatName" ) { ThreatName=i } if ($i=="cs-uri" ) { csuri=i } if ($i=="r-host" ) { rhost=i } if ($i=="r-ip" ) { rip=i } if ($i=="cs-referred" ) { csreferred=i } } } NR > 4 && $MalwareLevel!~/-/ && $1!~/#/ {print $clientIP, $csusername, $Fdate, $Ftime, $ThreatName, $csuri ,$csreferred > server"_Report_Virus_"date".csv"} NR > 4 && ($rip~/10.4.98.225/ || $rip~/10.4.98.227/) && $1!~/#/ { print $clientIP, $csusername, $Fdate, $Ftime, $csuri, $rip > server"_Internet_Trafic_"date".csv"} |