$
$ cat f38
conn=1 uid=oracle
conn=2 uid=db2
conn=3 uid=oracle
conn=4 uid=hash
conn=5 uid=skher
conn=6 uid=oracle
conn=7 uid=mpalkar
conn=8 uid=anarke
conn=9 uid=oracle
conn=1 op=-1 msgId=-1 - fd=104 slot=104 LDAPS connection from 10.10.5.6 to 10.18.6.5
conn=2 op=-1 msgId=-1 - fd=104 slot=104 LDAPS connection from 10.20.35.10 to 10.18.6.5
conn=3 op=-1 msgId=-1 - fd=104 slot=104 LDAPS connection from 10.30.35.19 to 10.18.6.5
conn=4 op=-1 msgId=-1 - fd=104 slot=104 LDAPS connection from 10.40.35.11 to 10.18.6.5
conn=5 op=-1 msgId=-1 - fd=104 slot=104 LDAPS connection from 10.50.35.12 to 10.18.6.5
conn=6 op=-1 msgId=-1 - fd=104 slot=104 LDAPS connection from 10.10.35.14 to 10.18.6.5
conn=7 op=-1 msgId=-1 - fd=104 slot=104 LDAPS connection from 10.20.35.15 to 10.18.6.5
conn=8 op=-1 msgId=-1 - fd=104 slot=104 LDAPS connection from 10.20.35.16 to 10.18.6.5
conn=9 op=-1 msgId=-1 - fd=104 slot=104 LDAPS connection from 10.10.35.14 to 10.18.6.5
$
$
$ perl -ne 'if (/^conn=(\d+)\s+(uid=(oracle|db2|hash))/) {
              $x{$1} = $2
            } elsif (/^conn=(\d+).*from\s+(.*?)\s+to.*$/ and defined $x{$1}) {
              $y{$2}->[0]++;
              $y{$2}->[1] = $x{$1};
            }
            END {
              while (($k, $v) = each %y) {
                printf ("IP=%12s  Hits=%d Pattern=\"%s\"\n", $k, @$v);
              }
            }
           ' f38
IP= 10.10.35.14  Hits=2 Pattern="uid=oracle"
IP= 10.40.35.11  Hits=1 Pattern="uid=hash"
IP= 10.20.35.10  Hits=1 Pattern="uid=db2"
IP= 10.30.35.19  Hits=1 Pattern="uid=oracle"
IP=   10.10.5.6  Hits=1 Pattern="uid=oracle"
$
$