[wplug] piping grep

Arnaud lists at arnaudloos.com
Wed Jun 17 09:09:31 EDT 2009


I'm trying to craft a bash statement that will output all the failed ssh
connections for the current day. The auth log starts each entry with a date
stamp like "Jun 17".

This gives me my desired output:
grep 'Failed password' /var/log/auth.log | grep 'Jun 17'

And so I assumed this would too:
grep 'Failed password' /var/log/auth.log | grep "date +'%b %d'"

I know I'm having a problem with the nested quotes but I'm not sure how. Can
someone set me straight.

Thanks.
Arnaud-



More information about the wplug mailing list