Log monitoring with swatch

A tool to search log files for interesting stuff.

When you think of Swatch, you probably think of the Swiss watch company. However, for the UNIX community swatch is a venerable active log file-monitoring tool that is written as a Perl script. A variant of the watch command, swatch is both simple and feature-filled. The tool extends tail –f and grep to view records in various log files. To the capabilities of these two commands, swatch adds pattern matching and more response option...

s.

After downloading swatch, unpacking it, and building it, the installation is straightforward. The script runs and determines which log files and capabilities are on your system, then it downloads any modules it needs to support monitoring those files. There is a manual installation, but most people accept the default. If the script doesn't complete itself, you should repeat the installation. After installation, you will find the executable file in the /usr/local/bin directory.

You'll need to create a configuration file for swatch, usually a file called .swatchrc, that is placed in a user's home directory. The distribution comes with sample uses of the command. For example, the watchfor command will find a match for a string; echo and bell show the matches on your screen and ring your bell, and mail will send a record of the match to the UID specified when swatch runs.


Barrie Sosinsky is president of consulting company Sosinsky and Associates (Medfield MA). He has written extensively on a variety of computer topics. His company specializes in custom software (database and Web related), training and technical documentation.


 

This was first published in December 2003

Dig deeper on Network Performance Management

Pro+

Features

Enjoy the benefits of Pro+ membership, learn more and join.

0 comments

Oldest 

Forgot Password?

No problem! Submit your e-mail address below. We'll send you an email containing your password.

Your password has been sent to:

-ADS BY GOOGLE

SearchSDN

SearchEnterpriseWAN

SearchUnifiedCommunications

SearchMobileComputing

SearchDataCenter

SearchITChannel

Close