Text Processing (Grep/Sed/Awk)

Stop getting buried by messy log files when extracting specific columns

🧩 The Challenge

You’re trying to figure out which IP address is hammering your web server, but the logs have twenty columns and everything is jumbled. Staring at raw text files for ten minutes is a great way to go blind.

💡 The Fix

Use awk to grab just the fields you actually need instead of trying to parse the whole mess with your eyeballs. It makes the signal-to-noise ratio jump from zero to ten immediately.

awk '{print $1, $9}' access.log | sort | uniq -c | sort -nr

⚙️ Why It Works

By default, awk splits on any amount of whitespace, so you just tell it which column numbers to spit out and ignore the rest of the junk. Piping that into sort and uniq turns a massive wall of text into a clean report of hits per IP and status code.

🚀 Pro-Tip: Stick a -F’,’ in front of the command if you’re dealing with CSV files instead of space-delimited logs.

Linux Tips & Tricks | © ngelinux.com | 8/24/2026