grep winnt error.log | cut -d " " -f 8 | cut -d ] -f 1 | uniq | wc -l #[Tue Sep 18 09:28:47 2001] [error] [client 65.104.43.157] File does n first cut seperates fields by spaces, 2nd cut removes trailing ] off ip.