.\" DO NOT MODIFY THIS FILE!  It was generated by help2man 1.46.4.
.TH BRO-CUT "1" "November 2014" "bro-cut " "User Commands"
.SH NAME
bro-cut \- parse bro logs
.SH SYNOPSIS
.B bro\-cut
[options] [<columns>]
.SH DESCRIPTION
Extracts the given columns from an ASCII Bro log on standard input.
If no columns are given, all are selected. By default,
.B bro\-cut
does not include format header blocks into the output.
.SH OPTIONS
.TP
\fB\-c\fR
Include the first format header block into the output.
.TP
\fB\-C\fR
Include all format header blocks into the output.
.TP
\fB\-d\fR
Convert time values into human\-readable format (needs gawk).
.HP
\fB\-D\fR <fmt> Like \fB\-d\fR, but specify format for time (see strftime(3) for syntax).
.HP
\fB\-F\fR <ofs> Sets a different output field separator.
.TP
\fB\-n\fR
Print all fields *except* those specified.
.TP
\fB\-u\fR
Like \fB\-d\fR, but print timestamps in UTC instead of local time (needs gawk).
.HP
\fB\-U\fR <fmt> Like \fB\-D\fR, but print timestamps in UTC instead of local time (needs gawk).
.SH ENVIRONMENT
.TP 
.B BRO_CUT_TIMEFMT
For the time conversion, the format string can also be specified by setting
an environment variable
.RB $ BRO_CUT_TIMEFMT
.
.SH EXAMPLES
.B cat
conn.log |
.B bro\-cut
\fB\-d\fR ts id.orig_h id.orig_p
.SH AUTHOR
.B bro-cut
was written by The Bro Project <info@bro.org>.
.PP
This manual page was written by Raúl Benencia <rul@kalgan.cc> for the
Debian project (but may be used by others).