Get Unique IP Address and # of Access The Next CEO of Stack OverflowOpen source scripting log analysis: tools for breaking stderr log messages into groups (normal bugs vs abnormal) or looking at trends (we're getting less of this message and more of that one)TCP performance differences between RH Linux and Solaris in java?High load on X3220 Quad Core Linux Apache serverhigh load average, high wait, dmesg raid error messages (debian nfs server)How can I get unique IPv4 and IPv6 visitor counts on nginx access.log in shell?Tracing down High Linux Load - HDD at fault or too many interrupts ? (ksoftirqd Time 437:44.13)Apache MySQL Server Crashing - Large number of connections from localhostSSH config (~/.ssh/config) - advanced configurationMySQL exits without any outputCheck if a constant file request is flooding the server

Why did CATV standarize in 75 ohms and everyone else in 50?

Why, when going from special to general relativity, do we just replace partial derivatives with covariant derivatives?

If Nick Fury and Coulson already knew about aliens (Kree and Skrull) why did they wait until Thor's appearance to start making weapons?

Easy to read palindrome checker

Chain wire methods together in Lightning Web Components

Should I cite using beginthebibliography or beginfilecontents*

I want to delete every two lines after 3rd lines in file contain very large number of lines :

Some questions about different axiomatic systems for neighbourhoods

WOW air has ceased operation, can I get my tickets refunded?

Why doesn't UK go for the same deal Japan has with EU to resolve Brexit?

Why don't programming languages automatically manage the synchronous/asynchronous problem?

Unclear about dynamic binding

Do I need to write [sic] when a number is less than 10 but isn't written out?

Bartok - Syncopation (1): Meaning of notes in between Grand Staff

Why is information "lost" when it got into a black hole?

Can MTA send mail via a relay without being told so?

How did people program for Consoles with multiple CPUs?

INSERT to a table from a database to other (same SQL Server) using Dynamic SQL

Powershell. How to parse gci Name?

Is there always a complete, orthogonal set of unitary matrices?

What happened in Rome, when the western empire "fell"?

Reference request: Grassmannian and Plucker coordinates in type B, C, D

What flight has the highest ratio of time difference to flight time?

Solving system of ODEs with extra parameter



Get Unique IP Address and # of Access



The Next CEO of Stack OverflowOpen source scripting log analysis: tools for breaking stderr log messages into groups (normal bugs vs abnormal) or looking at trends (we're getting less of this message and more of that one)TCP performance differences between RH Linux and Solaris in java?High load on X3220 Quad Core Linux Apache serverhigh load average, high wait, dmesg raid error messages (debian nfs server)How can I get unique IPv4 and IPv6 visitor counts on nginx access.log in shell?Tracing down High Linux Load - HDD at fault or too many interrupts ? (ksoftirqd Time 437:44.13)Apache MySQL Server Crashing - Large number of connections from localhostSSH config (~/.ssh/config) - advanced configurationMySQL exits without any outputCheck if a constant file request is flooding the server










0















I found the following code to see which IP Addresses has the highest hits:




FILE=access.log; for ip in cat $FILE |cut -d ' ' -f 1 |sort |uniq; do COUNT=grep ^$ip $FILE ; done




The above code displays the IP address with more than 500 hits (i.e. access on the site by opening the URL)



But that script is too slow. Is there any other code that create the same output?



Plus, how to display the top 10 results only that has the highest hits or access on the URL?










share|improve this question
















bumped to the homepage by Community yesterday


This question has answers that may be good or bad; the system has marked it active so that they can be reviewed.















  • how big is the access.log file?

    – tony roth
    Jul 11 '13 at 13:56











  • Average 125MB/day..

    – jaYPabs
    Jul 11 '13 at 13:57











  • Try log aggregation with Logstash and Kibana.

    – Tom O'Connor
    Jul 11 '13 at 14:35






  • 1





    Short answer: yes. cut -d' ' -f1 access.log | sort | uniq -c | awk '$1 ~ /[5-9][0-9][0-9]|[0-9][0-9][0-9][0-9]+/'. Only reads through your access log once rather than once per IP address. You can add | sort -n on the end if you want them sorted by hits.

    – Ladadadada
    Jul 11 '13 at 15:23
















0















I found the following code to see which IP Addresses has the highest hits:




FILE=access.log; for ip in cat $FILE |cut -d ' ' -f 1 |sort |uniq; do COUNT=grep ^$ip $FILE ; done




The above code displays the IP address with more than 500 hits (i.e. access on the site by opening the URL)



But that script is too slow. Is there any other code that create the same output?



Plus, how to display the top 10 results only that has the highest hits or access on the URL?










share|improve this question
















bumped to the homepage by Community yesterday


This question has answers that may be good or bad; the system has marked it active so that they can be reviewed.















  • how big is the access.log file?

    – tony roth
    Jul 11 '13 at 13:56











  • Average 125MB/day..

    – jaYPabs
    Jul 11 '13 at 13:57











  • Try log aggregation with Logstash and Kibana.

    – Tom O'Connor
    Jul 11 '13 at 14:35






  • 1





    Short answer: yes. cut -d' ' -f1 access.log | sort | uniq -c | awk '$1 ~ /[5-9][0-9][0-9]|[0-9][0-9][0-9][0-9]+/'. Only reads through your access log once rather than once per IP address. You can add | sort -n on the end if you want them sorted by hits.

    – Ladadadada
    Jul 11 '13 at 15:23














0












0








0








I found the following code to see which IP Addresses has the highest hits:




FILE=access.log; for ip in cat $FILE |cut -d ' ' -f 1 |sort |uniq; do COUNT=grep ^$ip $FILE ; done




The above code displays the IP address with more than 500 hits (i.e. access on the site by opening the URL)



But that script is too slow. Is there any other code that create the same output?



Plus, how to display the top 10 results only that has the highest hits or access on the URL?










share|improve this question
















I found the following code to see which IP Addresses has the highest hits:




FILE=access.log; for ip in cat $FILE |cut -d ' ' -f 1 |sort |uniq; do COUNT=grep ^$ip $FILE ; done




The above code displays the IP address with more than 500 hits (i.e. access on the site by opening the URL)



But that script is too slow. Is there any other code that create the same output?



Plus, how to display the top 10 results only that has the highest hits or access on the URL?







linux ubuntu-12.04 logging






share|improve this question















share|improve this question













share|improve this question




share|improve this question








edited Jul 11 '13 at 14:12







jaYPabs

















asked Jul 11 '13 at 13:09









jaYPabsjaYPabs

1141214




1141214





bumped to the homepage by Community yesterday


This question has answers that may be good or bad; the system has marked it active so that they can be reviewed.







bumped to the homepage by Community yesterday


This question has answers that may be good or bad; the system has marked it active so that they can be reviewed.














  • how big is the access.log file?

    – tony roth
    Jul 11 '13 at 13:56











  • Average 125MB/day..

    – jaYPabs
    Jul 11 '13 at 13:57











  • Try log aggregation with Logstash and Kibana.

    – Tom O'Connor
    Jul 11 '13 at 14:35






  • 1





    Short answer: yes. cut -d' ' -f1 access.log | sort | uniq -c | awk '$1 ~ /[5-9][0-9][0-9]|[0-9][0-9][0-9][0-9]+/'. Only reads through your access log once rather than once per IP address. You can add | sort -n on the end if you want them sorted by hits.

    – Ladadadada
    Jul 11 '13 at 15:23


















  • how big is the access.log file?

    – tony roth
    Jul 11 '13 at 13:56











  • Average 125MB/day..

    – jaYPabs
    Jul 11 '13 at 13:57











  • Try log aggregation with Logstash and Kibana.

    – Tom O'Connor
    Jul 11 '13 at 14:35






  • 1





    Short answer: yes. cut -d' ' -f1 access.log | sort | uniq -c | awk '$1 ~ /[5-9][0-9][0-9]|[0-9][0-9][0-9][0-9]+/'. Only reads through your access log once rather than once per IP address. You can add | sort -n on the end if you want them sorted by hits.

    – Ladadadada
    Jul 11 '13 at 15:23

















how big is the access.log file?

– tony roth
Jul 11 '13 at 13:56





how big is the access.log file?

– tony roth
Jul 11 '13 at 13:56













Average 125MB/day..

– jaYPabs
Jul 11 '13 at 13:57





Average 125MB/day..

– jaYPabs
Jul 11 '13 at 13:57













Try log aggregation with Logstash and Kibana.

– Tom O'Connor
Jul 11 '13 at 14:35





Try log aggregation with Logstash and Kibana.

– Tom O'Connor
Jul 11 '13 at 14:35




1




1





Short answer: yes. cut -d' ' -f1 access.log | sort | uniq -c | awk '$1 ~ /[5-9][0-9][0-9]|[0-9][0-9][0-9][0-9]+/'. Only reads through your access log once rather than once per IP address. You can add | sort -n on the end if you want them sorted by hits.

– Ladadadada
Jul 11 '13 at 15:23






Short answer: yes. cut -d' ' -f1 access.log | sort | uniq -c | awk '$1 ~ /[5-9][0-9][0-9]|[0-9][0-9][0-9][0-9]+/'. Only reads through your access log once rather than once per IP address. You can add | sort -n on the end if you want them sorted by hits.

– Ladadadada
Jul 11 '13 at 15:23











1 Answer
1






active

oldest

votes


















0














You're re-inventing the wheel. Try this:



sed -e 's/([0-9]+.[0-9]+.[0-9]+.[0-9]+).*$/1/' -e t -e d access.log | sort | uniq -c





share|improve this answer























  • Thanks. How to get top 10 or top 20 only with highest hits?

    – jaYPabs
    Jul 11 '13 at 14:02












  • Just add '| head -n 20' to the end of the command above.

    – slhsen
    Dec 30 '15 at 13:56











Your Answer








StackExchange.ready(function()
var channelOptions =
tags: "".split(" "),
id: "2"
;
initTagRenderer("".split(" "), "".split(" "), channelOptions);

StackExchange.using("externalEditor", function()
// Have to fire editor after snippets, if snippets enabled
if (StackExchange.settings.snippets.snippetsEnabled)
StackExchange.using("snippets", function()
createEditor();
);

else
createEditor();

);

function createEditor()
StackExchange.prepareEditor(
heartbeatType: 'answer',
autoActivateHeartbeat: false,
convertImagesToLinks: true,
noModals: true,
showLowRepImageUploadWarning: true,
reputationToPostImages: 10,
bindNavPrevention: true,
postfix: "",
imageUploader:
brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
allowUrls: true
,
onDemand: true,
discardSelector: ".discard-answer"
,immediatelyShowMarkdownHelp:true
);



);













draft saved

draft discarded


















StackExchange.ready(
function ()
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fserverfault.com%2fquestions%2f522529%2fget-unique-ip-address-and-of-access%23new-answer', 'question_page');

);

Post as a guest















Required, but never shown

























1 Answer
1






active

oldest

votes








1 Answer
1






active

oldest

votes









active

oldest

votes






active

oldest

votes









0














You're re-inventing the wheel. Try this:



sed -e 's/([0-9]+.[0-9]+.[0-9]+.[0-9]+).*$/1/' -e t -e d access.log | sort | uniq -c





share|improve this answer























  • Thanks. How to get top 10 or top 20 only with highest hits?

    – jaYPabs
    Jul 11 '13 at 14:02












  • Just add '| head -n 20' to the end of the command above.

    – slhsen
    Dec 30 '15 at 13:56















0














You're re-inventing the wheel. Try this:



sed -e 's/([0-9]+.[0-9]+.[0-9]+.[0-9]+).*$/1/' -e t -e d access.log | sort | uniq -c





share|improve this answer























  • Thanks. How to get top 10 or top 20 only with highest hits?

    – jaYPabs
    Jul 11 '13 at 14:02












  • Just add '| head -n 20' to the end of the command above.

    – slhsen
    Dec 30 '15 at 13:56













0












0








0







You're re-inventing the wheel. Try this:



sed -e 's/([0-9]+.[0-9]+.[0-9]+.[0-9]+).*$/1/' -e t -e d access.log | sort | uniq -c





share|improve this answer













You're re-inventing the wheel. Try this:



sed -e 's/([0-9]+.[0-9]+.[0-9]+.[0-9]+).*$/1/' -e t -e d access.log | sort | uniq -c






share|improve this answer












share|improve this answer



share|improve this answer










answered Jul 11 '13 at 14:00









SatanicpuppySatanicpuppy

5,52811216




5,52811216












  • Thanks. How to get top 10 or top 20 only with highest hits?

    – jaYPabs
    Jul 11 '13 at 14:02












  • Just add '| head -n 20' to the end of the command above.

    – slhsen
    Dec 30 '15 at 13:56

















  • Thanks. How to get top 10 or top 20 only with highest hits?

    – jaYPabs
    Jul 11 '13 at 14:02












  • Just add '| head -n 20' to the end of the command above.

    – slhsen
    Dec 30 '15 at 13:56
















Thanks. How to get top 10 or top 20 only with highest hits?

– jaYPabs
Jul 11 '13 at 14:02






Thanks. How to get top 10 or top 20 only with highest hits?

– jaYPabs
Jul 11 '13 at 14:02














Just add '| head -n 20' to the end of the command above.

– slhsen
Dec 30 '15 at 13:56





Just add '| head -n 20' to the end of the command above.

– slhsen
Dec 30 '15 at 13:56

















draft saved

draft discarded
















































Thanks for contributing an answer to Server Fault!


  • Please be sure to answer the question. Provide details and share your research!

But avoid


  • Asking for help, clarification, or responding to other answers.

  • Making statements based on opinion; back them up with references or personal experience.

To learn more, see our tips on writing great answers.




draft saved


draft discarded














StackExchange.ready(
function ()
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fserverfault.com%2fquestions%2f522529%2fget-unique-ip-address-and-of-access%23new-answer', 'question_page');

);

Post as a guest















Required, but never shown





















































Required, but never shown














Required, but never shown












Required, but never shown







Required, but never shown

































Required, but never shown














Required, but never shown












Required, but never shown







Required, but never shown







Popular posts from this blog

Wikipedia:Vital articles Мазмуну Biography - Өмүр баян Philosophy and psychology - Философия жана психология Religion - Дин Social sciences - Коомдук илимдер Language and literature - Тил жана адабият Science - Илим Technology - Технология Arts and recreation - Искусство жана эс алуу History and geography - Тарых жана география Навигация менюсу

Bruxelas-Capital Índice Historia | Composición | Situación lingüística | Clima | Cidades irmandadas | Notas | Véxase tamén | Menú de navegacióneO uso das linguas en Bruxelas e a situación do neerlandés"Rexión de Bruxelas Capital"o orixinalSitio da rexiónPáxina de Bruselas no sitio da Oficina de Promoción Turística de Valonia e BruxelasMapa Interactivo da Rexión de Bruxelas-CapitaleeWorldCat332144929079854441105155190212ID28008674080552-90000 0001 0666 3698n94104302ID540940339365017018237

What should I write in an apology letter, since I have decided not to join a company after accepting an offer letterShould I keep looking after accepting a job offer?What should I do when I've been verbally told I would get an offer letter, but still haven't gotten one after 4 weeks?Do I accept an offer from a company that I am not likely to join?New job hasn't confirmed starting date and I want to give current employer as much notice as possibleHow should I address my manager in my resignation letter?HR delayed background verification, now jobless as resignedNo email communication after accepting a formal written offer. How should I phrase the call?What should I do if after receiving a verbal offer letter I am informed that my written job offer is put on hold due to some internal issues?Should I inform the current employer that I am about to resign within 1-2 weeks since I have signed the offer letter and waiting for visa?What company will do, if I send their offer letter to another company