The Linux text-processing toolkit for on-call: grep, awk, sort, uniq and jq on real logs
During an incident you rarely need a dashboard; you need answers from a log file in under a minute. The handful of grep, awk, sort, uniq, cut and jq patterns we use most, each run against the same sample nginx and JSON logs, with the output and the mistakes to avoid.