Mastering grep: Powerful Search Techniques and Regex Tips for Linux

Introduction

grep (global regular expression print) is a powerful text‑search tool that uses regular expressions to find matching lines and print them.

The Unix grep family includes grep, egrep, and fgrep. egrep adds support for more regex metacharacters, while fgrep treats the pattern as a fixed string. Linux typically uses the GNU version, which provides the -G, -E, and -F options to emulate grep, egrep, and fgrep respectively.

Common grep usage

# grep [-acinv] [--color=auto] 'search_string' filename

Options: -a: treat binary files as text. -c: count matching lines. -i: ignore case. -n: show line numbers. -v: invert match (show non‑matching lines). --color=auto: highlight matches.

Examples

# grep root /etc/passwd

# cat /etc/passwd | grep root

# grep -n root /etc/passwd

# grep -v root /etc/passwd

# grep -v root /etc/passwd | grep -v nologin

Color alias

To avoid typing --color=auto each time, add the following alias to ~/.bashrc and reload:

alias grep='grep --color=auto'
source ~/.bashrc

Recursive search

# grep 'energywise' *

# grep -r 'energywise' *

# grep -l -r 'energywise' *

The -r option searches directories recursively, and -l lists only matching file names.

grep and regular expressions

Character classes

Search for t[ae]st to match both test and taste :

# grep -n 't[ae]st' regular_express.txt

Negated character class

Find lines containing oo not preceded by g:

# grep -n '[^g]oo' regular_express.txt

Ranges

Match lowercase letters at the start of a line: # grep -n '^[a-z]' regular_express.txt Match lines that do not start with a letter:

# grep -n '^[^a-zA-Z]' regular_express.txt

Anchors

Match lines beginning with the: # grep -n '^the' regular_express.txt Match lines ending with a period:

# grep -n '\.$' regular_express.txt

Wildcard and repetition

Match any four‑character string starting with g and ending with d: # grep -n 'g..d' regular_express.txt Match lines containing at least two consecutive o characters: # grep -n 'ooo*' regular_express.txt Match strings that start and end with g with any characters in between:

# grep -n 'g.*g' regular_express.txt

Quantifiers with braces

Find exactly two o characters: # grep -n 'o\{2\}' regular_express.txt Find between two and five o characters after a g and before another g:

# grep -n 'go\{2,5\}g' regular_express.txt

Extended grep (egrep)

Search for lines containing NW or EA: # egrep 'NW|EA' testfile Search for one or more 3 characters: # egrep '3+' testfile Search for lines with zero or one decimal point followed by a digit 0‑9: # egrep '2\.?[0-9]' testfile Search for one or more consecutive no strings:

# egrep '(no)+' testfile

Fixed‑string search (fgrep)

Search for a literal asterisk character: # fgrep '*' /etc/profile or using grep -F:

# grep -F '*' /etc/profile