Parsing Web Server Logs

Published January 02, 2017

This is assuming your webserver log is access.log.

Extract unique IP addresses from the webserver log:

cat access.log | awk '{print $1}' | uniq

Count number of unique IP addresses from log:

cat access.log | awk '{print $1}' | uniq | wc -l

List the IP addresses of users using iPhones:

cat access.log | grep -i iphone | awk '{print $1}' | uniq | sort

Count number of IP addresses of visitors who have a 444 error:

grep '444 0' access.log | awk '{print $1}' | sort -n | uniq -c | sort -n

List and sort user-agent strings uniquely:

awk -F"\"" '{print $6}' access.log | sort | uniq -dc | sort -nr

List top 25 IP addresses that have accessed my website:

awk '{print $1}' access.log | sort -n | uniq -c | sort -n | tail -25

Related Posts

If you have any questions, please contact me at arulbOsutkNiqlzziyties@gNqmaizl.bkcom. You can also post questions in our Facebook group. Thank you.

Disclaimer: Our website is supported by our users. We sometimes earn affiliate links when you click through the affiliate links on our website.

Last Updated: January 02, 2017. ย ย ย  This post was originally written on June 01, 2009.