使用shell腳本來檢索用戶活動的最大數量在文件

Question

給定的/ var/log/messages文件，如下是記錄不同用戶在發送電子郵件的記錄，例如：

20140912 chris sendingemails_id00012jjdi3x 
20140912 chris sendingemails_id00012jjdiji 
20140912 alen sendingemails_id00012jwciscl 
20140914 chris sendingemails_id00012jjdiji 
20140915 linda sendingemails_id042555jwciscl 
20140915 chris sendingemails_id00012jjdiji 
20140916 alen sendingemails_id005hhbxxsscl 
20140917 chris sendingemails_id2221d2rwaaiji 
20140917 linda sendingemails_id00012baseeqcl 
20140918 chris sendingemails_id45677tehhwaaiji 

現在，我需要檢索最多發送電子郵件的用戶。我該怎麼做？ 非常感謝。

Answer 1

這應有助於：

cat /var/log/messages | grep "sendingemails_" | awk '{print $2}' | sort | uniq -c 

或獲得準確的用戶名：

cat /var/log/messaes | grep "sendingemails_" | awk '{print $2}' | sort | uniq -c | sort -r | head -1 | awk '{print $2}'