Viewing logs when they're scrambled looking..
 

Instead of viewing logs via SSH / PUTTY.

I like to download them first to my PC..and view em there..so that I dont miss any lines or anything.

Some of the logs show up as normal text.. others looks all scrambled & i'm guessing encrypted ?

How do I find a good log viewer, to decrypt the scrambled looking ones ?

I've just been using WordPad for the most part.

This is a super noobish question i'm sure.

1. What are the full names of the log files you have downloaded?
2. Don't use wordpad. Apart from using different line endings to *nixes, it will 'helpfully' try to deciper character combinations for formatting, resulting in a mess of an output ;-)
Try the excellent free 'notepad++' but set it to 'unix' under the preferences.

I suspect you may be looking at gzipped log files (eg /var/log/mail.info.1.gz etc) and this in combination with wordpad is giving you the impression of encrypted output.

tail -n 500 /var/log/yourlogfile | less in PuTTY and you won't miss anything ;)
tail --help for details.

My version of Putty doesn't scroll up though..whatever is on the screen, thats it.

Is there a secret way to scroll up ? I believe I have version 0.57 Putty.

Use "less" as a pager. And there are certain logs like wtemp,
lastlog, faillog that have binary content - not because they're
encrypted, but because they're meant to be used by a program
like "last" that will show their contents in human readable form.



Cheers,
Tink

Thats amazing, I was just about to post how to view 'lastlog' as all I saw where come scrambled characters.

How can I view that ? I running Plesk as well. 9.2.3

I guess I need to use last to view lastlog ? how is it possible.

much appreciated.

I have no idea how plesk interacts with the system - sorry;
never seen or used it.

http://linux.die.net/man/8/lastlog
http://linux.die.net/man/8/faillog
http://linux.die.net/man/1/who

Can I just have the command to view lastlog ?

ls -s ?

Or change the number of 'lines of scrollback' in Putty (hint: Catagory > Window > Control Of Scrollback in Window)

The command to view lastlog is last, kind of unsurprisingly.

But looking at the man-pages should have told you that?

According to that man page the cmd is lastlog ...