True...but you don't have to tail all of the time.  You can tail for a few
seconds, then stop and analyze the log.  But you're right in that filtering
is a glaring omission in BareTail.  Highlighting helps, but filtering would
be best...especially with a toggle feature that allows you to inspect
filtered out areas surrounding the results.

Darin.


----- Original Message ----- 
From: "Len Conrad" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Tuesday, May 25, 2004 12:17 PM
Subject: Re: [IMail Forum] Huge Log Files and Queuemgr.exe showing high
utilization over 70% average



>BareTail also works great and allows you to view the file in realtime.
>
><http://www.baremetalsoft.com/baretail/>http://www.baremetalsoft.com/bareta
il/

for high-volume logs, tailing is useless as the lines scroll past too fast
too read.

But combining tailing with filtering

tail -f /path/to/logfile | egrep -i "smtpd.*(string1|string2|string3)"

would only show "SMTPD" lines which also contain either of the 3 strings.

It looks like baretail doesn't do any filtering, and Ipswitch has chosen a
file open mode that doesn't permit tail.exe (from
http://unxutils.sourceforge.net) to tail (it can open and read the file,
but cannot -follow the added lines).   In my DNS classes, we use tail.exe
in a cmd window to tail the BIND log (which is written in a filemode that
allows reading).

Len



_____________________________________________________________________
http://MenAndMice.com/DNS-training : Denver; NYC; San Jose
http://IMGate.MEIway.com : free anti-spam gateway, runs on 1000's of sites


To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html
List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/


To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html
List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/

Reply via email to