awk Patterns and Actions Introduction

Example

An awk consists of patterns and actions, enclosed in curly brackets, to be taken if a pattern matches. The most basic pattern is the empty pattern, which matches any record. The most basic action is the empty action, which is equivalent to { print }, which is, in turn, equivalent to { print $0 }. If both the pattern and the action are empty, awk will simply do nothing.

The following program will simply echo its input, for example:

awk '{ print }' /etc/passwd

Since { print } is the default action, and since a true value matches any record, that program could be re-written as:

awk '1' /etc/passwd

The most common type of pattern is probably a regular expression enclosed in slashes. The following program will print all records that contain at least two subsequent occurrences of the letter o, for example:

awk '/oo+/ { print }' /etc/passwd

However, you can use arbitrary expressions as patterns. The following program prints the names (field one) of users in group zero (field four), for example:

awk -F: '$4 == 0 { print $1 }' /etc/passwd

Instead of matching exactly, you can also match against a regular expression. The following program prints the names of all users in a group with at least one zero in its group id:

awk -F: '$4 ~ /0/ { print $1 }' /etc/passwd