Log File Navigator
Charly's Column – lnav
During a long trek through the verbose syslog, really important warnings and errors are scattered along the path. Sometimes a missing message can be the decisive event. Sys admin columnist Charly has now hired a tracker to help him search for clues: Log File Navigator.
Searching in logfiles is the sys admin's bread and butter. Finding a specific piece of information often requires long cascades of grep
commands. What makes this even more difficult is if a log message that I expect every five minutes is delayed. Of course, this is a warning signal, but I can't use grep
to figure this out. What can draw my attention to the fact that warning
messages are piling up? These difficulties prompted me to onboard Log File Navigator (lnav
, [1] ).
If you launch lnav
without any options, it opens /var/log/syslog
(Figure 1). Using:
lnav /var/log/syslog*
makes more sense, because it then includes older syslog files – whether compressed or not. lnav
bears the name "Navigator," because it makes it easy to walk through the logfiles in small steps or giant leaps. For example, Shift+D beams you back 24 hours into the past, and pressing D without Shift takes you back to the present. Shift+1 lets you jump back to 10 minutes after the last full hour, while Shift+2 jumps back to 20 minutes after the last full hour, and so on. Shift+G always takes you to the end of the log.
Searching is easy, too. You simply type /
followed by a search term. Besides strings, lnav
also accepts regular expressions, which makes complex and fuzzy searches possible. N and Shift+N let you jump between the hits. A search function using SQL syntax is currently still experimental.
W and Shift+W jump to the next/previous warning, while E and Shift+E jump to errors. Great stuff: S and Shift+S navigate to events that are out of sync – such as delayed events.
lnav
keeps statistics in the background. The History view (Figure 2) proves to be practical. It displays a graph showing the number of messages received and the proportion of warnings and errors. In the screenshot, the entries are totaled in 10-minute blocks. Z and Shift+Z let you zoom in and out of the time periods.
Once you have familiarized yourself with the keyboard shortcuts, working with lnav
will be as easy as pie for you. I only mentioned what are the most important shortcuts for me here; the complete list is available under "Hotkey Reference" on [2]. If I could wish for something in a future version, it would be more color schemes. I like to work with dark screens, but some color-highlighted areas in the log are not easy to read.
Infos
- lnav: https://lnav.org
- lnav documentation: https://lnav.readthedocs.io/en/latest/
Buy this article as PDF
(incl. VAT)
Buy Linux Magazine
Direct Download
Read full article as PDF:
Price $2.95
News
-
Deepin 23 Preview Release is Available For Testing
The developers of Deepin have made a preview release of their latest offering available with three exciting new features.
-
The First Point Release For Ubuntu 22.04 is Now Available
Canonical has released the first point upgrade for Jammy Jellyfish which includes important new toolchains and fixes.
-
Kali Linux 2022.3 Released
From the creators of the most popular penetration testing distributions on the planet, comes a new release with some new tools and a community, real-time chat option.
-
The 14" Pinebook Pro Linux Laptop is Shipping
After a considerable delay, the 14" version of the Pinebook Pro laptop is, once again, available for purchase.
-
OpenMandriva Lx ROME Technical Preview Released
OpenMandriva’s rolling release distribution technical preview has been released for testing purposes and adds some of the latest/greatest software into the mix.
-
Linux Mint 21 is Now Available
The latest iteration of Linux Mint, codenamed Vanessa, has been released with a new upgrade tool and other fantastic features.
-
Firefox Adds Long-Anticipated Feature
Firefox 103 has arrived and it now includes a feature users have long awaited…sort of.
-
System76 Refreshes Their Popular Oryx Pro Laptop with a New CPU
The System76 Oryx Pro laptop has been relaunched with a 12th Gen CPU and more powerful graphics options.
-
Elive Has Released a New Beta
The Elive team is proud to announce the latest beta version (3.8.30) of its Enlightenment-centric Linux distribution.
-
Rocky Linux 9 Has Arrived
The latest iteration of Rocky Linux is now available and includes a host of new features and support for new architecture.