logtail - print log file lines that have not been read
reads a specified file (usually a log file) and writes to the
standard output that part of it which has not been read by previous runs of
. It prints the appropriate number of bytes from the end of
, assuming that all changes that are made to it are to add new
characters to it.
must be a plain file. A symlink is not allowed.
stores the information about how much of it has already been read
in a separate file called offsetfile
can be omitted.
If omitted, the file named logfile.offset
in the same directory which
is used by default.
is not empty, the inode of logfile
is checked. If
the inode is changed, logtail
simply prints the entire file. If the
inode is not changed but logfile
is shorter than it was at the last run
, it writes a warning message to the standard output.
- logfile to be read after offset
- offsetfile stores offset of previous run
- test mode - do not change offset in offsetfile
- cannot get the size of logfile
- logfile does not exist, is not a plain file, or is
- cannot write offsetfile
The original logtail
was written in C by Craig H. Rowland
<email@example.com>. This version of logtail
is a Perl
reimplementation by Paul Slootman <firstname.lastname@example.org>. Enhanced by the
Debian Logcheck Team <email@example.com>.
This manual was written by Oohara Yuuma <firstname.lastname@example.org>.