12 Essential grep Command Combinations to Supercharge Log Analysis

grep is an indispensable tool for daily Linux/Unix operations, development debugging, and log analysis. Below are twelve frequently used grep command combinations that cover most real‑world scenarios.

1. Simple search

grep "ERROR" /var/log/messages

Exact search for all lines containing ERROR in the specified log file.

2. Case‑insensitive search

grep -i "error" /var/log/messages

The -i option ignores case, matching error, Error, or ERROR.

3. Show line numbers with highlighting

grep -ni --color=auto "ERROR" /data/tomcat/logs/catalina.out

-n

adds line numbers, and --color=auto highlights matches for quick identification.

4. Count occurrences

grep -c "ERROR" /var/log/messages

Outputs the total number of matches without displaying the matching lines.

5. Exclude noise

grep "ERROR" /var/log/messages | grep -v "DEBUG"

First matches ERROR, then filters out any lines containing DEBUG.

6. Multiple keywords with regex

grep -E "ERROR|WARN" /var/log/messages

Searches for either ERROR or WARN in a single pass.

7. Extract matching portion

grep -o "ERROR.*" /data/tomcat/logs/catalina.out

Outputs only the part of each line that matches, e.g., the entire error message starting with ERROR.

8. Search recursively in a directory

grep -ir "https://www.liyb.com" ./logs

-r

traverses the current directory and all sub‑directories, searching for the specified string.

9. Limit search to specific file types

grep -ir --include="*.log" "Logger" ./logs

Searches only files ending with .log, avoiding unrelated files.

10. Show surrounding context

grep -C 3 "ERROR" catalina.out

Displays three lines of context before and after each match. Variants: -A N – show N lines after the match. -B N – show N lines before the match.

11. Real‑time log filtering

tail -f catalina.out | grep "ERROR"

Continuously monitors the log and shows only lines containing ERROR. Enhanced version:

tail -f catalina.out | grep -E "ERROR|WARN" | grep -v "DEBUG"

Shows only ERROR or WARN while filtering out DEBUG messages.

12. Combine with find for precise searches

find ./ -name "*.log" | xargs grep "OutOfMemory"

Searches for the string OutOfMemory across all .log files in the directory tree.

Mastering these combinations can significantly speed up log troubleshooting and analysis.