awk basics (field processing) in Linux CLI - Commands & Configuration

Introduction

Sometimes you have text files or command outputs with columns of data. Awk helps you pick out and work with these columns easily. It reads each line, splits it into fields, and lets you print or manipulate those fields.

When you want to extract the second column from a list of users and their IDs.

When you need to sum up numbers in the third column of a sales report.

When you want to print only the first and last names from a list separated by spaces.

When you want to filter lines based on a value in a specific column.

When you want to quickly reformat columns from a log file for easier reading.

Commands

This command prints the second word (field) from each line of the input text. Awk splits each line by spaces by default and $2 means the second field.

Terminal

echo -e "apple banana cherry\ndog elephant frog" | awk '{print $2}'

Expected Output

banana

elephant

This command adds the first and third numbers on each line and prints the result. Awk treats fields as numbers when used with arithmetic.

Terminal

echo -e "10 20 30\n40 50 60" | awk '{print $1 + $3}'

Expected Output

40

100

This prints the first and second fields (first and last names) separated by a space from each line.

Terminal

echo -e "John Doe 25\nJane Smith 30" | awk '{print $1, $2}'

Expected Output

John Doe

Jane Smith

This filters lines where the second field is greater than 6 and prints the first field from those lines.

Terminal

echo -e "red 5\nblue 10\ngreen 7" | awk '$2 > 6 {print $1}'

Expected Output

blue

green

Key Concept

If you remember nothing else from awk, remember: $1, $2, $3... represent the first, second, third fields of each line, and you can print or use them in calculations.

Common Mistakes

Using $0 when intending to print a specific field

$0 prints the whole line, not a single field, so you get the entire line instead of just one column.

Use $1, $2, etc., to print specific fields instead of $0.

Forgetting that awk splits fields by spaces or tabs by default

If your data uses a different separator like commas, awk will not split fields correctly and output will be wrong.

Use the -F flag to specify the correct field separator, e.g., awk -F, for comma-separated values.

Trying to do arithmetic on fields that contain text

Awk treats non-numeric fields as zero in arithmetic, leading to wrong results.

Make sure fields used in calculations contain only numbers.

Summary

Use awk with $1, $2, $3 to access fields (columns) in each line of text.

You can print fields, do math on numeric fields, or filter lines based on field values.

Awk splits fields by spaces or tabs by default but you can change this with -F.

Practice

1. What does $2 represent in an awk command?

easy

A. The number of fields in the current line

B. The entire current line

C. The first character of the line

D. The second field (word) in the current line

Solution

1. Step 1: Understand how awk splits lines

   awk automatically splits each input line into fields separated by spaces or tabs.

2. Step 2: Identify what $2 means

   $2 refers to the second field (word) in the current line.

3. Final Answer:

   The second field (word) in the current line -> Option D

4. Quick Check:

   $2 = second field [OK]

Hint: Remember: $1 is first word, $2 second, and so on [OK]

Common Mistakes:

• Confusing $2 with the whole line ($0)
• Thinking $2 is the number of fields (NF)
• Mixing field numbers with character positions

2. Which of the following is the correct syntax to print the third field of each line using awk?

easy

A. awk '{print $3}' filename

B. awk 'print $3' filename

C. awk '{print 3}' filename

D. awk '{print $}' filename

Solution

1. Step 1: Recall the basic awk print syntax

   The print statement must be inside braces: {print $3}.

2. Step 2: Check each option

   awk '{print $3}' filename uses correct braces and $3. Options B, C, and D have syntax errors or wrong usage.

3. Final Answer:

   awk '{print $3}' filename -> Option A

4. Quick Check:

   Print field 3 with braces [OK]

Hint: Always use braces { } around print commands in awk [OK]

Common Mistakes:

• Omitting braces around print statement
• Printing a number instead of a field variable
• Using incomplete or invalid field syntax

3. Given a file data.txt with the following content:

apple 10 red
banana 5 yellow
cherry 20 red

What is the output of awk '{print $1, $3}' data.txt?

medium

A. apple red
banana yellow
cherry red

B. apple
banana
cherry

C. 10 red
5 yellow
20 red

D. apple 10
banana 5
cherry 20

Solution

1. Step 1: Identify fields in each line

   Each line has three fields: $1=fruit, $2=number, $3=color.

2. Step 2: Understand the print command

   awk '{print $1, $3}' prints the first and third fields separated by space.

3. Final Answer:

   apple red banana yellow cherry red -> Option A

4. Quick Check:

   Print first and third fields [OK]

Hint: Match $1, $2, $3 to columns in order [OK]

Common Mistakes:

• Mixing up field numbers
• Printing wrong fields or all fields
• Ignoring spaces between printed fields

4. What is wrong with this command: awk '{print $4}' data.txt if data.txt has only 3 fields per line?

medium

A. It prints the third field instead

B. It causes a syntax error

C. It prints an empty line for each input line

D. It prints the entire line

Solution

1. Step 1: Understand field numbering in awk

   Fields are numbered from 1 to NF (number of fields). If $4 is requested but only 3 fields exist, $4 is empty.

2. Step 2: Predict output behavior

   Printing $4 prints nothing, resulting in empty lines for each input line.

3. Final Answer:

   It prints an empty line for each input line -> Option C

4. Quick Check:

   Missing field prints empty [OK]

Hint: Fields beyond NF print empty, no error [OK]

Common Mistakes:

• Expecting syntax error for missing fields
• Thinking it prints last field instead
• Assuming it prints whole line if field missing

5. You want to print only the lines from file.txt where the second field is greater than 100 using awk. Which command achieves this?

hard

A. awk '{if $2 > 100 print $0}' file.txt

B. awk '$2 > 100 {print $0}' file.txt

C. awk '{print $0 if $2 > 100}' file.txt

D. awk '$2 => 100 {print $0}' file.txt

Solution

1. Step 1: Understand condition syntax in awk

   Conditions go before the action block. The correct comparison operator is >, not =>.

2. Step 2: Check each option

   awk '$2 > 100 {print $0}' file.txt uses correct syntax: $2 > 100 {print $0}. awk '{if $2 > 100 print $0}' file.txt misses parentheses and braces. awk '{print $0 if $2 > 100}' file.txt has wrong syntax. awk '$2 => 100 {print $0}' file.txt uses invalid operator =>.

3. Final Answer:

   awk '$2 > 100 {print $0}' file.txt -> Option B

4. Quick Check:

   Condition before action, use > operator [OK]

Hint: Put condition before braces, use > not => [OK]

Common Mistakes:

• Using invalid comparison operators like =>
• Placing if inside braces without parentheses
• Omitting braces or condition syntax errors