[root@swaggserver-01 httpd]# cat access_log-20191* | awk '$7 ~/\.php/ {print $4}' | sort | uniq -c | sort -r | head 13 [27/Nov/2019:16:18:08 12 [26/Nov/2019:17:36:17 12 [24/Nov/2019:05:20:51 11 [23/Nov/2019:00:48:57 8 [23/Nov/2019:01:49:10 7 [23/Nov/2019:01:49:11 7 [23/Nov/2019:00:48:58 6 [26/Nov/2019:17:36:18 6 [24/Nov/2019:19:02:19 6 [24/Nov/2019:05:20:50 [root@swaggserver-01 httpd]# cat access_log-20191* | awk '$7 ~/\.php/ {print $4}' | sort | uniq -c | sort -r | tail 1 [01/Dec/2019:00:55:58 1 [01/Dec/2019:00:55:57 1 [01/Dec/2019:00:55:03 1 [01/Dec/2019:00:54:40 1 [01/Dec/2019:00:54:20 1 [01/Dec/2019:00:52:48 1 [01/Dec/2019:00:52:40 1 [01/Dec/2019:00:52:34 1 [01/Dec/2019:00:52:16 1 [01/Dec/2019:00:52:13