Oct 24 12:00:01 bob systemd: Started Session 49 of user root.
Oct 24 12:00:01 bob systemd: Starting Session 49 of user root.
Oct 24 12:01:02 bob systemd: Started Session 50 of user root.
Oct 24 12:01:02 bob systemd: Starting Session 50 of user root.
Oct 24 12:10:01 bob systemd: Started Session 51 of user root.
Oct 24 12:10:01 bob systemd: Starting Session 51 of user root.
注意sed 中间不支持 | 需要用双引号加转义
sed -n "/Oct 24 12:\(00\|10\).*/p" messages
Oct 24 12:00:01 bob systemd: Started Session 49 of user root.
Oct 24 12:00:01 bob systemd: Starting Session 49 of user root.
Oct 24 12:10:01 bob systemd: Started Session 51 of user root.
Oct 24 12:10:01 bob systemd: Starting Session 51 of user root.
awk '/Oct 24 12:(00|01).*/ {print $0}' messages
Oct 24 12:00:01 bob systemd: Started Session 49 of user root.
Oct 24 12:00:01 bob systemd: Starting Session 49 of user root.
Oct 24 12:01:02 bob systemd: Started Session 50 of user root.
Oct 24 12:01:02 bob systemd: Starting Session 50 of user root.