使用正则表达式过滤apache日志文件

Question

I have a big apache log file and I need to filter that and leave only (in a new file) the log from a certain IP: 192.168.1.102

I try using this command:

sed -e "/^192.168.1.102/d" < input.txt > output.txt

But "/d" removes those entries, and I needt to leave them.

Thanks.

Answer 1

What about using grep ?

cat input.txt | grep -e "^192.168.1.102" > output.txt

EDIT: As noted in the comments below, escaping the dots in the regex is necessary to make it correct. Escaping in the regex is done with backslashes:

cat input.txt | grep -e "^192\.168\.1\.102" > output.txt

Answer 2

sed -n 's/^192\\.168\\.1\\.102/&/p'

sed比我的机器上的grep快

Answer 3

I think using grep is the best solution but if you want to use sed you can do it like this:

sed -e '/^192\.168\.1\.102/b' -e 'd'

The b command will skip all following commands if the regex matches and the d command will thus delete the lines for which the regex did not match.