|HP-UX Reference > E
evmsort(1)HP-UX 11i Version 3: February 2007
evmsort — sort events
The evmsort command reads and sorts a stream of EVM events. By default, events are read from stdin, and are sorted into ascending timestamp order. Sorted events are written to the command's stdout stream in the form of raw EVM events.
The sort order can be specified by supplying a sort_spec, either through the -s option or by setting the environment variable EVM_SORT_SPEC to the required specification. The specification is a character string of the form:
@key_item [ +|- ] [:@ key_item[ +|- ]]
The key_item is the name of any EVM standard data item and the @ character is optional.
If the special key_item @@ is specified, the event's format data item is expanded as described in the evmshow(1) manpage, and the resulting string is used as the sort key.
The optional trailing + or - character indicates ascending (+} or descending (-) sort. By default, items are sorted in ascending order.
Multiple items in the string are separated by colon characters (:). The left-most key_item in the specification is the most significant key.
If a key_item that is included in the sort specification is not present in an event read from the input stream, the item is considered to have a low value for that event. For example, if input events are being sorted in ascending order according to their name data items, and one event does not contain a name, that event appears first in the output stream.
If the -A option is specified, evmsort automatically starts evmshow and pipes the sorted event stream into it, producing a sorted and formatted display of events. If a -t show_template argument is also specified with -A, the specified template string is passed to evmshow through its own -t option.
See the evmshow(1) manpage for more information.
evmget -f '[priority >= 300]' | evmsort -s "@priority-:@timestamp" | evmshow -t "@priority @timestamp @@"