Differences between revisions 6 and 7
Revision 6 as of 2010-04-08 16:09:28
Size: 3598
Editor: WillDye
Comment: Added a reference to 'coproc', and rephrased some of the text
Revision 7 as of 2010-04-08 17:21:40
Size: 3547
Editor: GreyCat
Comment: minor changes
Deletions are marked like this. Additions are marked like this.
Line 12: Line 12:
A simple "tail -f" from an interactive terminal session works just fine, A simple `tail -f` from an interactive terminal session works just fine,
Line 14: Line 14:
the command might not recognize that the final output is being used interactively. the command might not recognize that the final output is needed in (near-)real-time.
Line 26: Line 26:
The {{{expect}}} package has an The [[http://expect.nist.gov/|expect]] package has an
Line 29: Line 29:
as if they were being used interactively (which should disable buffering). as if they were being used interactively (which may often disable buffering).
Line 34: Line 34:
{{{expect}}} and {{{unbuffer}}} may already be installed on your system.
If not, the {{{expect}}} package can be found at: http://expect.nist.gov/
`expect` and `unbuffer` are not standard POSIX tools, but they may already be installed on your system.
Line 37: Line 37:
At least the GNU version of {{{tee}}} appears to produce unbuffered output. For example: At least the GNU version of `tee` appears to produce unbuffered output. For example:
Line 44: Line 44:
This has only been tested on GNU {{{tee}}}, so [[http://en.wiktionary.org/wiki/your_mileage_may_vary|YMMV]]. This has only been tested on GNU `tee`, so [[http://en.wiktionary.org/wiki/your_mileage_may_vary|YMMV]].
Line 48: Line 48:
rather than filter out non-matching lines, you can use the {{{less}}} program instead of Bash: rather than filter out non-matching lines, you can use the `less` program instead of Bash:
Line 52: Line 52:
 * Inside {{{less}}}, start a search with the '/' command (similar to searching in vi).  * Inside `less`, start a search with the '/' command (similar to searching in vi).
Line 54: Line 54:
 * Now put {{{less}}} into "follow" mode, which by default is bound to shift+f.  * Now put `less` into "follow" mode, which by default is bound to shift+f.
Line 60: Line 60:
For details, consult {{{man less}}}. For details, consult `man less`.
Line 64: Line 64:
whatever you're really trying to do with {{{tail -f}}} might benefit from using whatever you're really trying to do with `tail -f` might benefit from using
Line 67: Line 67:
Note well that {{{coproc}}} does '''not''' itself address buffering issues Note well that `coproc` does '''not''' itself address buffering issues
Line 69: Line 69:
{{{coproc}}} is only mentioned here because whenever someone is trying to `coproc` is only mentioned here because whenever someone is trying to

My command line produces no output: tail -f logfile | grep 'foo bar'

Most standard Unix commands buffer their output when used non-interactively. This means that they don't write each character (or even each line) as the input arrives, but instead collect a larger number of characters (often 4 kilobytes) before printing anything at all. In the case above, the tail command buffers its output, and therefore grep only gets its input in e.g. 4K blocks.

Buffering greatly increases the efficiency of I/O operations, and it's usually done in a way that doesn't visibly affect the user. A simple tail -f from an interactive terminal session works just fine, but when commands are in scripts, functions, or part of a complicated set of pipes, the command might not recognize that the final output is needed in (near-)real-time. Fortunately, there are several techniques available for controlling I/O buffering behavior.

Your command may already support unbuffered output

Some programs provide special command line options specifically for this sort of problem:

grep (e.g. GNU version 2.5.1)

--line-buffered

sed (e.g. GNU version 4.0.6)

-u,--unbuffered

awk (some GNU versions)

-W interactive, or use the fflush() function

tcpdump, tethereal

-l

unbuffer

The expect package has an unbuffer program which effectively tricks other programs into always behaving as if they were being used interactively (which may often disable buffering). Here's a simple example:

    unbuffer tail -f logfile | grep 'foo bar'

expect and unbuffer are not standard POSIX tools, but they may already be installed on your system.

tee

At least the GNU version of tee appears to produce unbuffered output. For example:

   $ program | tee -a program.log

   In another window:
   $ tail -f program.log | grep whatever

This has only been tested on GNU tee, so YMMV.

less

If you simply wanted to highlight the search term, rather than filter out non-matching lines, you can use the less program instead of Bash:

   $ less program.log
  • Inside less, start a search with the '/' command (similar to searching in vi).

  • This should highlight any instances of the search term.
  • Now put less into "follow" mode, which by default is bound to shift+f.

  • You should get an unfiltered tail of the specified file, with the search term highlighted.

"follow" mode is stopped with an interrupt, which is probably control+c on your system. The '/' command accepts regular expressions, so you could do things like highlight the entire line on which a term appears. For details, consult man less.

coproc

If you're using ksh or Bash 4.0+, whatever you're really trying to do with tail -f might benefit from using coproc and fflush() to create a coprocess. Note well that coproc does not itself address buffering issues (in fact it's prone to buffering problems -- hence the reference to fflush). coproc is only mentioned here because whenever someone is trying to continuously monitor and react to a still-growing file (or pipe), they might be trying to do something which would benefit from coprocesses.


CategoryShell

BashFAQ/009 (last edited 2024-03-07 20:19:09 by emanuele6)