26 Sep
2011
26 Sep
'11
11:19 p.m.
On Sun, Sep 25, 2011 at 22:43, John R Pierce pierce@hogranch.com wrote:
uniq can count occurances. will require two sorts. one to get all similar errors adjacent, the other to sort by count order. instead of using field selects, lets just clip the timestamps off up front...
cut -c 17- | sort | uniq -c | sort -rn
(17- means from char 17 on... I may have miscounted)
Thank you John! That is perfect! I'm going through the uniq manpage now. Have a great night!
--
Dotan Cohen
http://gibberish.co.il
http://what-is-what.com