From owner-freebsd-questions@FreeBSD.ORG Thu Nov 6 16:11:40 2014 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTPS id 7494ADC0 for ; Thu, 6 Nov 2014 16:11:40 +0000 (UTC) Received: from smtpb.telissant.net (smtpb.telissant.net [199.233.230.156]) by mx1.freebsd.org (Postfix) with ESMTP id 48E2B31C for ; Thu, 6 Nov 2014 16:11:39 +0000 (UTC) Received: from barrida.3dresearch.com (localhost [127.0.0.1]) by smtpb.telissant.net (Postfix) with ESMTP id BB15E2731E for ; Thu, 6 Nov 2014 11:04:12 -0500 (EST) X-Virus-Scanned: amavisd-new at telissant.net Received: from smtpb.telissant.net ([127.0.0.1]) by barrida.3dresearch.com (barrida.3dresearch.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 0hdFrRwOkedN for ; Thu, 6 Nov 2014 11:03:57 -0500 (EST) Received: from doncurzio.3dresearch.com (pool-71-112-0-222.pitbpa.east.verizon.net [71.112.0.222]) (using TLSv1 with cipher ADH-CAMELLIA256-SHA (256/256 bits)) (No client certificate requested) by smtpb.telissant.net (Postfix) with ESMTPSA id 9CA53273FC for ; Thu, 6 Nov 2014 11:03:29 -0500 (EST) Received: from doncurzio.3dresearch.com (localhost [127.0.0.1]) by doncurzio.3dresearch.com (Postfix) with SMTP id D2E13A1E2C for ; Thu, 6 Nov 2014 11:03:28 -0500 (EST) Date: Thu, 6 Nov 2014 11:03:19 -0500 From: Janos Dohanics To: FreeBSD Questions Subject: uniq(1) on last field Message-Id: <20141106110319.eb34eaa069a4881824072010@3dresearch.com> X-Mailer: Sylpheed 3.3.0 (GTK+ 2.24.19; amd64-portbld-freebsd9.1) Mime-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.18-1 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 06 Nov 2014 16:11:40 -0000 Hello List, Would you please help with a shell scripting problem. I have a samba audit log file which after some parsing has entries like this: Nov 5 10:26:29 testuser 10.10.10.72 pluto pwrite ok COMMON/Solidworks Parts & Assemblies/Filter Elements/~$Element 2-3187.SLDPRT Nov 5 12:50:54 testuser 10.10.10.72 pluto pwrite ok COMMON/Solidworks Parts & Assemblies/Filter Elements/~$Element 2-3187.SLDPRT Nov 5 14:05:52 testuser 10.10.10.72 pluto pwrite ok COMMON/Solidworks Parts & Assemblies/Filter Elements/~$Element 2-3187.SLDPRT Nov 5 17:30:06 testuser 10.10.10.72 pluto pwrite ok COMMON/Solidworks Parts & Assemblies/Filter Elements/~$Element 2-3187.SLDPRT Nov 5 09:32:48 testuser 10.10.10.72 pluto pwrite ok COMMON/Solidworks Parts & Assemblies/Gaskets/Flexitallic/10in/~$10in ANSI 600 Flexitallic.SLDPRT Nov 5 09:32:48 testuser 10.10.10.72 pluto pwrite ok COMMON/Solidworks Parts & Assemblies/Gaskets/Flexitallic/20in/~$20in ANSI 600 Flexitallic.SLDPRT Nov 5 09:32:32 testuser 10.10.10.72 pluto pwrite ok COMMON/Solidworks Parts & Assemblies/Lifting Lugs/~$54in Tower Lifting Lug.SLDPRT Nov 5 10:31:29 testuser 10.10.10.72 pluto pwrite ok COMMON/Solidworks Parts & Assemblies/CDE - Beck/Tube Baffle Coalescer Model/~$40in OD Shell.SLDPRT Nov 5 10:32:20 testuser 10.10.10.72 pluto pwrite ok COMMON/Solidworks Parts & Assemblies/CDE - Beck/Tube Baffle Coalescer Model/~$40in OD Shell.SLDPRT Nov 5 12:54:43 testuser 10.10.10.72 pluto pwrite ok COMMON/Solidworks Parts & Assemblies/CDE - Beck/Tube Baffle Coalescer Model/~$40in OD Shell.SLDPRT Nov 5 15:07:10 testuser 10.10.10.72 pluto pwrite ok COMMON/Solidworks Parts & Assemblies/CDE - Beck/Tube Baffle Coalescer Model/~$40in OD Shell.SLDPRT I would like to use uniq(1) on the file name, which is of course the last field if / is used as field separator. How can I tell uniq(1) the "last field" if I have variable number of fields? -- Janos Dohanics