I have seen someone use this command -- and it works where it pulls back all the IPS in a list/group:
cat access.* | awk '{ print $1 }' | sort | uniq -c | sort -n
However, I want to choose the past 2 days; how can I do that?
-
so before issuing the above coomand u need to filter the access log and get the entries for last two days , and pipe the output to the above command , to get the entries in a timespan see this stackoverflow.com/questions/7706095/…Ijaz Ahmad– Ijaz Ahmad2016-07-13 22:56:52 +00:00Commented Jul 13, 2016 at 22:56
Add a comment
|
1 Answer
tail -100 access.* | awk '{ print $1 }' | sort | uniq -c | sort -n
or
awk '/28\/Mar\/2016/ { print $1 }' access.* | sort | uniq -c | sort -n
