Master Real-Time Log Monitoring on Linux with tail, multitail, lnav, and less

How to view log files in real time on Linux using various utilities.

1. tail command – real‑time log monitoring

Use tail -f /var/log/apache2/access.log to follow a file. The tailf command is equivalent and does not require the -f switch. sudo tail -f /var/log/apache2/access.log When log rotation creates a new file, tail -F continues following the new file. sudo tail -F /var/log/apache2/access.log To display only the last two lines while following, combine -n and -f:

sudo tail -n2 -f /var/log/apache2/access.log

2. multitail – monitor multiple logs simultaneously

Install multitail:

sudo apt install multitail   # Debian/Ubuntu
sudo yum install multitail   # RedHat/CentOS
sudo dnf install multitail   # Fedora 22+

Run it on two log files:

sudo multitail /var/log/apache2/access.log /var/log/apache2/error.log

3. lnav – another multi‑log viewer

Install lnav:

sudo apt install lnav   # Debian/Ubuntu
sudo yum install lnav   # RedHat/CentOS
sudo dnf install lnav   # Fedora 22+

View two logs together:

sudo lnav /var/log/apache2/access.log /var/log/apache2/error.log

4. less – real‑time view with Shift+F

Press Shift+F inside less to follow the end of the file, similar to tail.

sudo less +F /var/log/apache2/access.log