Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

I'm looking for a tool which will allow me to scroll through logs from client and server, and keep both views in synch by timestamps within the log lines.

So each log entry from log A would be vertically aligned with the nearest (by timestamp) entry from log B.

I'm visualising this being a bit like a the way a visual diff tool scrolls 2 files and keeps them "in sync" even if one has content the other does not. This tool would be a little like that, but would try to align lines by their timestamps rather than textual similarity of the line.

I'm sure someone has written this.

I'm on windows, but I'm analysing historic logs and I could transfer them to linux vm if the tool was good enough.

share|improve this question
add comment

2 Answers 2

You may use RSYSLOG to capture logs from all hosts to a common host and store them in a database in sequence. A simple query to the database can pull the log entries in timestamp sequence

If you have the logs on one host and you simply want to analyze behavior, and they are in the same format, then you may want to take a look at Microsoft Logparser. Assuming your logs are csv formatted each containing a header field called datetime and with an extension of .log

Logpaser -i:csv "select datetime, hostname, logentry from *.log order by datetime ASC"

Refs:

http://en.wikipedia.org/wiki/Rsyslog

http://en.wikipedia.org/wiki/Logparser

share|improve this answer
    
While it's not what I'm looking for exactly, the MS LogParser is a good tip, I'd come across it at some point before I think, but since forgotten it. –  Foo42 Oct 3 '11 at 13:23
add comment

I am trying to use vim LogViewer plugin to this purpose, but it is definitely not polished and I still have problems with getting it to work.

https://github.com/vim-scripts/LogViewer

See also my question here: http://stackoverflow.com/questions/21234136/vim-navigate-simultaneously-through-multiple-files-with-timestamps

share|improve this answer
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.