On Wed, Jun 23, 2004 at 02:35:27AM +0100, Craig Tinson wrote: > ok.. this doesn't work... > > tail -F /var/log/maillog | egrep --line-buffered -v > 'imapd|connection|processing' | awk '{print $1" "$2" -("$3")"}' | grcat > conf.craig > > am presuming that awk doesn't like not have a finished pipe.. but the > man page doesn't mention anything about buffering.. > > awk seems the way to go.. because... > > tail -n500 -F /var/log/maillog | egrep --line-buffered -v > 'imapd|connection|processing' | cut -d" " -f0,3,6,7,8,9,10 | grcat > conf.craig > > runs, at the moment, about 30-60 mins from the end of the log... but > thats probably something completely different....which is a shame.. as > it gives as close to an output as i'm looking for... <snip> Have you checked out multitail? It has regex filtering capabilities: http://www.vanheusden.com/multitail/ -- Jack Bowling mailto: jbinpg@xxxxxxx