≡ Menu

The tail command is one of the best tool to view log files in a real time using tail -f /path/to/log.file syntax on a Unix-like systems. The program MultiTail lets you view one or multiple files like the original tail program. The difference is that it creates multiple windows on your console (with ncurses). This is one of those dream come true program for UNIX sys admin job. You can browse through several log files at once and do various operations like search for errors and more.

Install MultiTail On a Linux

Type the following command under Debian / Ubuntu Linux:
$ sudo apt-get update
$ sudo apt-get install multitail

RHEL/CentOS/Fedora/Red Hat Enterprise Linux user type the following yum command (first turn on EPEL repo for RHEL/CentOS v5.x/6.x and EPEL repo for RHEL/CentOS version 7.x):
# yum install multitail

If you are using FreeBSD, enter:
# portsnap fetch update
# cd /usr/ports/sysutils/multitail
# make install clean

Apple Mac OS X user type the following command:
$ brew install multitail

How To View Multiple Files Like tail Command

To view /var/log/messages and /var/log/auth.log, enter:
# multitail /var/log/messages /var/log/auth.log
Sample output:

Here is another output with lots of logfiles and command output in multiple windows in a terminal:

Multitail in action

Multitail in action

How do I run a command and view a log file?

Simply use command as follows:
# multitail /var/log/iptables.log -l "ping server.nixcraft.in"
OR
# multitail /var/log/httpd.log -l "netstat -nat"
The -l option allows command to execute in a window. Do not forget to use "'s if the external command needs parameter! (e.g. -l "ping host").

How do I display 3 logfiles in 2 columns?

To see all 3 files related to anti mail server gateway, enter:
# multitail -s 2 /var/log/maillog /var/log/FuzzyOcr.log /var/log/antivirus.log
multitail has many other useful options. Please read man page for further details:
man multitail

Further readings:
Tweet itFacebook itGoogle+ itPDF itFound an error/typo on this page?

{ 17 comments… add one }

  • Henrik Nordvik February 9, 2009, 9:45 pm

    Thanks for the tip!
    Don’t forget xtail. I use it to monitor hits to multiple sites with logstalgia and other programs that are designed for regular tail, but works great with xtail too.

  • xiao_haozi February 9, 2009, 9:51 pm

    Been trying multitail off and on for a while now…but one thing that has always got me:
    when viewing say access logs for webserver it has a good 5-10 delay it seems.

  • xiao_haozi February 9, 2009, 9:52 pm

    Edit: sorry missed adding ‘MINUTES’ to my last comment… my apologies.

  • Meskalyn February 10, 2009, 11:26 am

    Just a little mistake on FreeBSD : you wrote :
    portsnap featch update
    It’s fetch

  • nixCraft February 10, 2009, 11:43 am

    @ Meskalyn, thanks for the heads up.

    @xiao_haozi, May be your server is not so busy…

  • theToaster February 10, 2009, 7:41 pm

    there is a “typo”:
    # multilog /var/log/messages /var/log/auth.log
    should be better multitail ;)

  • Stephen Clayton February 10, 2009, 7:59 pm

    Thanks for the post on Multitail. I’ve been looking for a tool like this for a long time…

  • Adam Dempsey February 18, 2009, 9:44 am

    Is it possible to view multiple files but in one view? Eg view the same log file from 5 different machines but all as one?

    For example

    Log Line from Machine 1
    Log Line from Machine 1
    Log Line from Machine 2
    Log Line from Machine 4
    Log Line from Machine 2

    Is this possible?

  • kpb February 19, 2009, 12:07 am

    Great tip !! I’m going to try this out tonight !

  • Intellignix March 5, 2009, 11:28 am

    I could this when I am monitoring logs on my log server. Thank you!

    intelliginix.com

  • sanjay Katiyar March 9, 2009, 7:08 am

    Is there any equivalent command in Fedora/CentOS?

  • Maroon Ibrahim March 20, 2009, 7:49 pm

    Better to switch to Debian ;)

  • jeffiam October 29, 2012, 12:28 am

    @sanjay run #yum install multitail

  • krishna bagal July 12, 2013, 10:30 am

    this is amazing i love to use this…

  • Scott August 31, 2014, 2:30 pm

    I usually run tail with grep so I’m only see what I’m looking for. Is that possible with multitail? I’ll snag it and play with it later.

  • Nickchacha December 31, 2014, 5:59 am

    For earlier centos version your need first to install EPEL repository otherwise you will get

    [root@mail ~]# yum install multitail
    Loaded plugins: fastestmirror, security
    Loading mirror speeds from cached hostfile
    * base: mirror.wbs.co.za
    * extras: mirror.wbs.co.za
    * updates: mirror.wbs.co.za
    Setting up Install Process
    No package multitail available.
    Nothing to do

  • Jon Drews December 31, 2014, 6:19 pm

    Most modern tail implementations can take more than one file inherently.

    tail -f /var/log/messages /var/log/auth.log /var/log/syslog

Leave a Comment