grep with regex (-E) in Linux CLI - Mini Project: Build & Apply

Using grep with Extended Regular Expressions (-E)

📖 Scenario: You work as a system administrator. You have a log file with many lines. You want to find lines that match certain patterns quickly.

🎯 Goal: Learn how to use grep -E to search for lines matching multiple patterns using extended regular expressions.

📋 What You'll Learn

Use the grep command with the -E option

Search for lines matching multiple patterns using the pipe | symbol

Use a sample text file with specific lines

Display the matching lines as output

💡 Why This Matters

🌍 Real World

System administrators often need to search logs quickly for errors or warnings to troubleshoot issues.

💼 Career

Knowing how to use grep with extended regex helps in filtering important information from large text files efficiently.

1

Create a sample log file

Create a file called log.txt with these exact lines:
error: disk full
warning: low memory
info: system rebooted
error: network down
info: user login

Linux CLI

# Create the file log.txt with the given lines
# Your code here

Hint

Use echo -e with newline characters \n and redirect output to log.txt.

2

Set the search pattern variable

Create a variable called pattern and set it to the string "error|warning" to match lines containing either 'error' or 'warning'.

Linux CLI

echo -e "error: disk full\nwarning: low memory\ninfo: system rebooted\nerror: network down\ninfo: user login" > log.txt
# Create the variable pattern with value "error|warning"
# Your code here

Hint

Use pattern="error|warning" to store the regex pattern.

3

Use grep with -E and the pattern variable

Use the command grep -E "$pattern" log.txt to search log.txt for lines matching the pattern stored in pattern.

Linux CLI

echo -e "error: disk full\nwarning: low memory\ninfo: system rebooted\nerror: network down\ninfo: user login" > log.txt
pattern="error|warning"
# Use grep -E with "$pattern" on log.txt
# Your code here

Hint

Use grep -E "$pattern" log.txt to find matching lines.

4

Display the matching lines

Run the script to display all lines from log.txt that contain either 'error' or 'warning'.

Linux CLI

echo -e "error: disk full\nwarning: low memory\ninfo: system rebooted\nerror: network down\ninfo: user login" > log.txt
pattern="error|warning"
grep -E "$pattern" log.txt
# Run the command to show matching lines
# Your code here

Hint

The output should show only lines with 'error' or 'warning'.

Practice

1. What does the -E option do when used with the grep command?

easy

A. Ignores case when searching

B. Searches only for exact string matches without regex

C. Prints line numbers along with matching lines

D. Enables extended regular expressions for more complex pattern matching

Solution

1. Step 1: Understand grep options

   The -E option tells grep to use extended regular expressions, which allow special symbols like |, +, and ().

2. Step 2: Compare with other options

   Other options like -i ignore case, and -n print line numbers, but -E specifically enables extended regex.

3. Final Answer:

   Enables extended regular expressions for more complex pattern matching -> Option D

4. Quick Check:

   grep -E = extended regex [OK]

Hint: Remember: -E means extended regex for flexible patterns [OK]

Common Mistakes:

• Confusing -E with -i (ignore case)
• Thinking -E disables regex
• Mixing -E with line number option -n

2. Which of the following is the correct syntax to search for lines containing either "cat" or "dog" using grep -E?

easy

A. grep -E 'cat|dog' filename

B. grep -E 'cat+dog' filename

C. grep -E 'cat?dog' filename

D. grep -E 'cat.dog' filename

Solution

1. Step 1: Understand the regex for alternatives

   The symbol | means OR in extended regex, so cat|dog matches lines with either "cat" or "dog".

2. Step 2: Check other regex symbols

   + means one or more of previous character, ? means zero or one, and . means any single character, so they don't match the OR condition.

3. Final Answer:

   grep -E 'cat|dog' filename -> Option A

4. Quick Check:

   Use | for OR in grep -E [OK]

Hint: Use | inside quotes for OR patterns with grep -E [OK]

Common Mistakes:

• Using + or ? instead of | for OR
• Not quoting the pattern
• Confusing . with |

3. Given a file data.txt with these lines:

apple
banana
applepie
pineapple
banana split

What is the output of grep -E '^apple$|banana$' data.txt?

medium

A. applepie
banana

B. apple
banana split

C. apple
banana

D. apple
banana
banana split

Solution

1. Step 1: Analyze the regex pattern

   The pattern ^apple$|banana$ means lines exactly matching "apple" OR lines ending with "banana".

2. Step 2: Match lines in the file

   "apple" matches ^apple$. "banana" matches banana$. "applepie" does not match ^apple$ due to extra characters after "apple". "pineapple" matches neither. "banana split" does not end with "banana".

3. Final Answer:

   apple banana -> Option C

4. Quick Check:

   ^apple$ or banana$ matches apple and banana [OK]

Hint: Remember ^ means start, $ means end in regex [OK]

Common Mistakes:

• Assuming banana split matches banana$
• Matching applepie because it contains apple
• Ignoring anchors ^ and $

4. You run grep -E '(foo|bar)+' file.txt but get an error: grep: invalid regular expression. What is the likely cause?

medium

A. You forgot to quote the pattern

B. The parentheses are not escaped and your grep version does not support unescaped ()

C. The + symbol is not valid in extended regex

D. The file.txt does not exist

Solution

1. Step 1: Check regex syntax and grep version

   Some grep versions require escaping parentheses even with -E, so unescaped () cause invalid regex error.

2. Step 2: Verify other options

   Quoting is done, + is valid in extended regex, and file existence error would be different.

3. Final Answer:

   The parentheses are not escaped and your grep version does not support unescaped () -> Option B

4. Quick Check:

   Escape () if grep -E errors [OK]

Hint: Escape parentheses if grep -E gives regex error [OK]

Common Mistakes:

• Assuming + is invalid in extended regex
• Not quoting pattern causing shell errors
• Confusing file not found with regex error

5. You want to find lines in log.txt that contain a date in format YYYY-MM-DD or YYYY/MM/DD using grep -E. Which pattern correctly matches both formats?

hard

A. grep -E '[0-9]{4}[-/][0-9]{2}[-/][0-9]{2}' log.txt

B. grep -E '[0-9]{4}-|/[0-9]{2}-|/[0-9]{2}' log.txt

C. grep -E '\d{4}[-/]\d{2}[-/]\d{2}' log.txt

D. grep -E '[0-9]{4}[-|/][0-9]{2}[-|/][0-9]{2}' log.txt

Solution

1. Step 1: Understand character classes and alternation

   Character class [-/] matches either '-' or '/'. Using [0-9] matches digits. Curly braces specify exact counts.

2. Step 2: Analyze each option

   grep -E '\d{4}[-/]\d{2}[-/]\d{2}' log.txt uses \d which is not supported by grep regex. grep -E '[0-9]{4}-|/[0-9]{2}-|/[0-9]{2}' log.txt uses ungrouped -|/ causing incorrect alternation that splits the pattern. grep -E '[0-9]{4}[-|/][0-9]{2}[-|/][0-9]{2}' log.txt uses [-|/] which includes '|' as a character, incorrect. grep -E '[0-9]{4}[-/][0-9]{2}[-/][0-9]{2}' log.txt correctly uses character classes [-/] without extra characters.

3. Final Answer:

   grep -E '[0-9]{4}[-/][0-9]{2}[-/][0-9]{2}' log.txt -> Option A

4. Quick Check:

   Use [0-9]{n} and [-/] for digits and separators [OK]

Hint: Use [0-9] and [-/] for digits and dash or slash [OK]

Common Mistakes:

• Using \d which grep does not support
• Including | inside character class incorrectly
• Using parentheses without escaping in some grep versions