Very basic grep question

Say I have a log file, for example lets say its the auth.log

Is there a way to use to grep to pull out the lines that had 'accepted' and 'root' in it? So I can see who logged in and then who invoked root.

Since these are on different lines, I can't pipe the second grep, so I would be looking to grep [acc OR root]. Is that possible?

StiLL-TrAiNinG

egrep "root|acc" is what you're looking for I believe.

Thanks, what is the syntax as the following code isn't working

cat /var/log/auth.log | egrep acc|root > /some/where/else

StiLL-TrAiNinG

Deleted User wrote: »

Thanks, what is the syntax as the following code isn't working

cat /var/log/auth.log | egrep acc|root > /some/where/else

Ah, the acc|root needs to be quoted, otherwise it'll think that it's just another pipe character.

Also for grep, you don't need to cat something first.

This should be it:

egrep "acc|root" /var/log/auth.log > /some/where/else

Thanks! That works perfectly