grep+sort+uniq分组统计固定格式字符出现次数例如要在中到每⾏phone=xxxx的电话出现次数 grep -o "正则表达式" | sort |uniq -c |sort -k1,1nr
-o 表⽰精确匹配字符
sort 排序
uniq -c 在匹配到的字符前⾯加上⼀列出现次数
sort -k1,1nr 按第⼀列倒序
-n, --numeric-sort 根据字符串数值⽐较
blog.csdn/hijiankang/article/details/70792456
[root@ip logs]# vi test.log
[2017-12-16 15:45:49] [info] 1706572 Commons Daemon procrun (1.0.15.0 64-bit) started [2017-12-16 15:45:49] [info] 1706572 Running 'Tomcat7'
[2017-12-16 15:45:49] [info] 1706632
[2017-12-16 15:45:51] [info] 1706632 Service started in 1617 ms.
[2017-12-16 15:50:57] [info] 1716024
[2017-12-16 15:50:58] [info] 1716024 Service stop thread completed.
[2017-12-16 15:50:59] [info] 1706572 Run service finished.
[2017-12-16 15:50:59] [info] 1706572 Commons Daemon procrun finished
[2017-12-16 15:51:21] [info] 1711056 Commons Daemon procrun (1.0.15.0 64-bit) started [2017-12-16 15:51:22] [info] 1711056 Running 'Tomcat7'
[2017-12-16 15:51:22] [info] 1716072
[2017-12-16 15:51:23] [info] 1716072 Service started in 1511 ms.
[2017-12-16 15:45:49] [info] 1706571 Commons Daemon procrun (1.0.15.0 64-bit) started [2017-12-16 15:45:49] [info] 1706571 Running 'Tomcat7'
[2017-12-16 15:45:49] [info] 1706632
[2017-12-16 15:45:51] [info] 1706632 Service started in 1617 ms.
[2017-12-16 15:50:57] [info] 1716023
[2017-12-16 15:50:58] [info] 1716024 Service stop thread completed.
[2017-12-16 15:50:59] [info] 1706575 Run service finished.
msinfo[2017-12-16 15:50:59] [info] 1706578 Commons Daemon procrun finished
[2017-12-16 15:51:21] [info] 1711056 Commons Daemon procrun (1.0.15.0 64-bit) started [2017-12-16 15:51:22] [info] 1711056 Running 'Tomcat7'
[2017-12-16 15:51:22] [info] 1716074
[2017-12-16 15:51:23] [info] 1716072 Service started in 1511 ms.
~
[root@ip logs]# cat test.log | awk '{print $4}' | sort -nr | uniq -c | sort -k1,1nr 4 1706572
4 1706632
4 1711056
3 1716024
3 1716072
2 1706571
1 1706575
1 1706578
1 1716023
1 1716074