14
votes

Using the following Select-String command in PowerShell:

Select-String -Path E:\Documents\combined0.txt -Pattern "GET /ccsetup\.exe" -AllMatches > E:\Documents\combined3.txt

creates an output file with each line starting with the path and file name followed by a colon. For example:

E:\Documents\combined0.txt:255:255.255.255 - - [31/Dec/2014:04:15:16 -0800] "GET /ccsetup.exe HTTP/1.1" 301 451 "-" "Mozilla/5.0 (compatible; SearchmetricsBot; http://www.xxxx.com/en/xxxx-bot/)"

How do I get rid of the output file path name, output file name and colon in the results?

6

6 Answers

29
votes

Select-String outputs an object from which you can pick off properties that you want. The Get-Member command will show you these object members if you pipe into it e.g.:

Select-String -Path E:\Documents\combined0.txt -Pattern "GET /ccsetup\.exe" -AllMatches  | 
    Get-Member

One of those properties is Line. So try it this way:

Select-String -Path E:\Documents\combined0.txt -Pattern "GET /ccsetup\.exe" -AllMatches | 
    Foreach {$_.Line} > E:\Documents\combined3.txt
9
votes

As usual powershell returns things as objects, by default select-string returns several properties including LineNumber, Filename, etc; the one you want with the data in is just called "Line". So no need for anything fancy, just pipe it to "select line".

Eg:

Select-String "bla" filename.txt | select-object -ExpandProperty Line | out-file E:\bla_text.txt
1
votes

If you're looking for (sub)strings rather than patterns, using the -like operator might be a better approach, performance-wise and with respect to ease-of-use.

$searchString = 'GET /ccsetup.exe'

Get-Content 'E:\Documents\combined0.txt' |
  ? { $_ -like "*$searchString*" } |
  Set-Content 'E:\Documents\combined3.txt'

If you do need pattern matches, you can easily replace the -like operator with the -match operator:

$pattern = 'GET /ccsetup\.exe'

Get-Content 'E:\Documents\combined0.txt' |
  ? { $_ -match $pattern } |
  Set-Content 'E:\Documents\combined3.txt'
0
votes
Get-Content E:\Documents\combined0.txt | Select-String -Pattern "GET /ccsetup\.exe" -AllMatches
0
votes
# define your search path
$files = Get-ChildItem "./some_path"


for ($i=0; $i -lt $files.Count; $i++) {
    # loop through files in search folder
    $x=Select-String -Path $files[$i].FullName -Pattern "whatYouSearch"
    # retrieve the info with the option Line
    $out=$x.Line 
    # echo to output file (append)
    $out >> result.csv
}
0
votes

I found this and wanted a simpler method of filtering out the exact text. I used "| select-object -ExpandProperty Line" at the end of "Select-String -Path C:\Temp\AccountLockoutPolicy.Txt -Pattern 'ResetLockoutCount ='" and it removed the path and the line number. I like simple!