What Does grep Do?

Definition

grep (global regular expression print) reads text input—files or stdin—and prints every line that matches a pattern. It is the workhorse for searching logs, configs, and source trees from the shell. Implementations differ slightly (GNU grep vs BSD grep), but the mental model is the same: pattern, optional flags, then paths.

Core flags

Flag	Meaning	Typical use
`-i`	Ignore case	Log keyword hunts
`-n`	Line numbers	Editor jump targets
`-r` / `-R`	Recursive directories	Repo-wide search (respect .gitignore with other tools)
`-E`	Extended regex	Modern alternation and grouping
`-F`	Fixed string	Literal IPv4 or dotted paths without escaping dots
`-v`	Invert match	Drop noise lines
`--color`	Highlight hits	Human readability in terminals

Exit codes and pipelines

GNU grep exits 0 when a match exists, 1 when none, and 2 on error—scripts can branch on that. Piping journalctl | grep is common; remember grep may buffer unless you choose line-buffered modes for live tails.

Beyond classic grep

ripgrep (rg) respects ignore files and is faster on huge trees. git grep searches tracked content only. For structured logs, consider jq or Loki—not every problem is a regex problem.

Related: Linux grep command explained, Linux commands primer, Windows CMD commands (findstr counterpart).

Frequently Asked Questions

Q.What is the difference between grep, egrep, and fgrep?

Historically egrep enabled extended regex and fgrep treated the pattern as a fixed string. On modern GNU systems, grep -E and grep -F are preferred; egrep/fgrep are often thin compatibility wrappers.

Q.Why does grep say Binary file matches?

The file contains NUL bytes or other binary data; grep skips printing by default. Use grep -a to force text mode when you know the file is safe to treat as text.

Q.How do I search recursively but skip huge directories?

Use --exclude-dir=node_modules --exclude-dir=.git patterns, or switch to ripgrep which reads .gitignore by default.

Q.Does grep change files?

No—grep only reads input and prints matches. Use sed -i or an editor to modify files.

Q.Why does my regex work in one tool but not grep?

Dialect differs—basic vs extended vs Perl (grep -P on GNU). Start with grep -F for literals, then graduate to -E with documented syntax.

Q.Can grep search compressed logs?

Not by itself—use zgrep/zless or rg -z depending on format, or decompress first.

Q.What locale issues affect grep?

Character classes and ranges can change with LC_COLLATE/LC_ALL. For ASCII-stable behavior in scripts, many operators set LC_ALL=C.

Q.When should I use ripgrep instead of grep?

Large repositories, need for speed, smart ignore rules, and prettier defaults—rg is not always installed on minimal servers, so know both.