Hack The Sec-Leading Resource Of Linux Tutorial: Log_File

<div dir="ltr" style="text-align: left;" trbidi="on">
<h1 class="post-title entry-title" style="background-color: white; border: 0px; color: #155c8e; font-family: "Titillium Web", Arial, sans-serif; font-stretch: inherit; font-variant-numeric: inherit; font-weight: 400; letter-spacing: -1px; line-height: 1.3em; margin: 0px 0px 10px; padding: 0px; vertical-align: baseline; word-wrap: break-word;">
<span style="font-size: large;"><u>Install and use Log File Navigator – lnav in Ubuntu and CentOS</u></span></h1>
<div>
<div>
<span style="color: #333333; font-family: verdana, geneva, sans-serif;"><span style="font-size: 15px;">The Log File Navigator, lnav, is an enhanced log file viewer that takes advantage of any semantic information that can be gleaned from the files being viewed, such as timestamps and log levels. </span></span></div>
<div>
<span style="color: #333333; font-family: verdana, geneva, sans-serif;"><span style="font-size: 15px;"><br /></span></span></div>
<div>
<span style="color: #333333; font-family: verdana, geneva, sans-serif;"><span style="font-size: 15px;">Using this extra semantic information, lnav can do things like interleaving messages from different files, generate histograms of messages over time, and providing hotkeys for navigating through the file. It is hoped that these features will allow the user to quickly and efficiently zero in on problems.</span></span></div>
<div>
<span style="color: #333333; font-family: verdana, geneva, sans-serif;"><span style="font-size: 15px;"><br /></span></span></div>
<div>
<span style="color: #333333; font-family: verdana, geneva, sans-serif;"><span style="font-size: 15px;">In this article we will show you how to install and use The Log File Navigator, lnav, on <a href="http://www.hackthesec.co.in/search/label/Ubuntu">Ubuntu </a>15.04/15.10/ and <a href="http://www.hackthesec.co.in/search/label/Centos">CentOS 7</a>.x</span></span></div>
</div>
<div>
<span style="color: #333333; font-family: verdana, geneva, sans-serif;"><span style="font-size: 15px;"><br /></span></span></div>
<div>
<span style="font-family: verdana, geneva, sans-serif;"><span style="font-size: 15px;"><div>
<b><u><span style="color: #0b5394;">lnav – Features</span></u></b></div>
<div style="color: #333333;">
<ul style="text-align: left;">
<li>Single log view: all log file contents are merged into a single view based on message timestamps. No need to manually correlate timestamps across multiple windows or figure out the order in which to view rotated log files.</li>
<li>Automatic format detection for several common log files. It also detects gzip/bzi2 files and decompress them automatically on the fly.</li>
<li>Filters: display only lines that match or do not match a set of regular expressions. Filter by error level.</li>
<li>Timeline view: shows a histogram of messages over time. The number of warnings and errors are highlighted in the display so that you can easily see where problems have occurred.</li>
<li>Query logs using SQL: log files are directly used as the backing for SQLite virtual tables.</li>
<li>Automatic data extraction: built-in log message parser can automatically discover and extract interesting data from plainly formatted log messages.</li>
<li>Live operation: Search as you type. New log lines are automatically loaded and searched as they are added; filters apply to lines as they are loaded; and, SQL queries are checked for correctness as you type.</li>
<li>Syntax highlighting with configurable colourizing</li>
<li>Tab completion</li>
<li>Sessions</li>
<li>Supports Linux and Mac</li>
</ul>
</div>
</span></span></div>
<div>
<span style="color: #333333; font-family: verdana, geneva, sans-serif;"><span style="font-size: 15px;"><b><u>Install lnav on Ubuntu 15.04/15.10 and Linux Mint 17.x</u></b></span></span></div>
<div>
<span style="color: #333333; font-family: verdana, geneva, sans-serif;"><span style="font-size: 15px;"><b><br /></b></span></span></div>
<div>
<span style="color: #333333; font-family: verdana, geneva, sans-serif;"><span style="font-size: 15px;">To install lnav on Ubuntu 15.04/15.10 and Linux Mint 17.x and other Ubuntu based distribution, type following command in your terminal:</span></span></div>
<div>
<pre style="background: rgb(68, 67, 65); border-radius: 6px; border: 1px solid rgb(227, 227, 227); box-sizing: border-box; clear: none !important; color: white; font-family: monospace, serif; font-size: 14px; margin-bottom: 10px !important; margin-top: 10px !important; overflow: auto; padding: 10px !important; width: auto !important; word-break: break-all;">$ sudo apt-get install lnav -y</pre>
</div>
<div>
<span style="background-color: white; font-size: 15px;"><span style="color: #333333; font-family: verdana, geneva, sans-serif;"><div>
<b><u>Install lnav on CentOS 7</u></b></div>
<div>
<b><u><br /></u></b></div>
<div>
First, enable epel repository:</div>
<div>
<pre style="background: rgb(68, 67, 65); border-radius: 6px; border: 1px solid rgb(227, 227, 227); box-sizing: border-box; clear: none !important; color: white; font-family: monospace, serif; font-size: 14px; margin-bottom: 10px !important; margin-top: 10px !important; overflow: auto; padding: 10px !important; width: auto !important; word-break: break-all;">$ sudo yum install epel-release -y</pre>
</div>
</span></span></div>
<div>
<span style="background-color: white; font-size: 15px;"><span style="color: #333333; font-family: verdana, geneva, sans-serif;">Now, install lnav using yum command:</span></span></div>
<div>
<pre style="background: rgb(68, 67, 65); border-radius: 6px; border: 1px solid rgb(227, 227, 227); box-sizing: border-box; clear: none !important; color: white; font-family: monospace, serif; font-size: 14px; margin-bottom: 10px !important; margin-top: 10px !important; overflow: auto; padding: 10px !important; width: auto !important; word-break: break-all;">$ sudo yum install lnav -y</pre>
</div>
<div>
<span style="background-color: white; font-size: 15px;"><span style="color: #333333; font-family: verdana, geneva, sans-serif;"><div>
<b><u>Using lnav command</u></b></div>
<div>
If you want to view logs using lnav you can do using the following command by default it shows syslogs.</div>
</span></span></div>
<div>
<pre style="background: rgb(68, 67, 65); border-radius: 6px; border: 1px solid rgb(227, 227, 227); box-sizing: border-box; clear: none !important; color: white; font-family: monospace, serif; font-size: 14px; margin-bottom: 10px !important; margin-top: 10px !important; overflow: auto; padding: 10px !important; width: auto !important; word-break: break-all;">$ lnav</pre>
</div>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhQu5LEdC3IG2TW_rGdocj0NAYHpqQooYYJW8h-spbGA0Qdan60IFvgOfuni0OS2aZl_s0e-R4ezIT_7_iHTWwcwXxZg2dpQwvvZ3g6SH9jnjcg5fOrPQ1tAT5l2L21W7Khdy2_PUxBJKi3/s1600/Use-lnav-log-viewer.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhQu5LEdC3IG2TW_rGdocj0NAYHpqQooYYJW8h-spbGA0Qdan60IFvgOfuni0OS2aZl_s0e-R4ezIT_7_iHTWwcwXxZg2dpQwvvZ3g6SH9jnjcg5fOrPQ1tAT5l2L21W7Khdy2_PUxBJKi3/s1600/Use-lnav-log-viewer.png" /></a></div>
<div>
<span style="background-color: white; color: #333333; font-family: verdana, geneva, sans-serif; font-size: 15px;"><br /></span></div>
<div>
<span style="background-color: white; font-size: 15px;"><span style="color: #333333; font-family: verdana, geneva, sans-serif;">If you want to view specific logs provide the path. Example:</span></span></div>
<div>
<pre style="background: rgb(68, 67, 65); border-radius: 6px; border: 1px solid rgb(227, 227, 227); box-sizing: border-box; clear: none !important; color: white; font-family: monospace, serif; font-size: 14px; margin-bottom: 10px !important; margin-top: 10px !important; overflow: auto; padding: 10px !important; width: auto !important; word-break: break-all;">$ lnav /var/log/clamav/</pre>
</div>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg-sYeWh28aR19JJBG39T-MyV2YwlsN2DZ-uudRJBvKag3mgJ2EB5mYau4ImxK6wBhgCmmi6QI17VXiZSXgtQKIu0uWfPdoDF0gKWyrquxionTfTjDYiNsd__lQLiaEdJbSKiWPn55qlMBB/s1600/lnav-view-specific-logs.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg-sYeWh28aR19JJBG39T-MyV2YwlsN2DZ-uudRJBvKag3mgJ2EB5mYau4ImxK6wBhgCmmi6QI17VXiZSXgtQKIu0uWfPdoDF0gKWyrquxionTfTjDYiNsd__lQLiaEdJbSKiWPn55qlMBB/s1600/lnav-view-specific-logs.png" /></a></div>
<div>
<span style="background-color: white; color: #333333; font-family: verdana, geneva, sans-serif; font-size: 15px;"><br /></span></div>
<div>
<span style="background-color: white; font-size: 15px;"><span style="color: #333333; font-family: verdana, geneva, sans-serif;"><b><u>How to navigate in lnav</u></b></span></span></div>
<div>
<span style="background-color: white; color: #333333; font-family: verdana, geneva, sans-serif; font-size: 15px;"><br /></span></div>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgXmLlEjaj4f6ozCZaIHNnR8QHs2nehhcxyIlZatSI0lu9-R1xof12i1JacCfRYMFKL4LNFAKL5vvkrlvNHazZP_9Sq_9CDZtJZCbKsMDVUyJ9d3G1udhjiDjKClI3bvU8PpZNGi_MDABgx/s1600/how-to-use-lnav.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgXmLlEjaj4f6ozCZaIHNnR8QHs2nehhcxyIlZatSI0lu9-R1xof12i1JacCfRYMFKL4LNFAKL5vvkrlvNHazZP_9Sq_9CDZtJZCbKsMDVUyJ9d3G1udhjiDjKClI3bvU8PpZNGi_MDABgx/s1600/how-to-use-lnav.png" /></a></div>
<div>
<span style="background-color: white; color: #333333; font-family: verdana, geneva, sans-serif; font-size: 15px;"><br /></span></div>
<div>
For more information visit <a href="http://lnav.org/">official lnav site.</a></div>
<div>
<br /></div>
</div>