lnav v0.11.2

Features:

• A "cursor" mode has been added to the main view that can
  be toggled by pressing CTRL-X. While in cursor mode, any
  operations that would normally work on the "top" line will
  now operate on the focused line instead.
• Added CTRL-D and CTRL-U hotkeys to move down/up by half
  a page.
• Added an auto-width flag to the elements of the
  line-format array that indicates that the width of the
  field should automatically be determined by the observed
  values.
• Number fields used in a line-format now default to
  being right-aligned.

Bug Fixes:

• Hidden values in JSON logs are now hidden by default.
• Text with ANSI-escapes is now filtered properly.

lnav v0.11.2

Features:

• A "cursor" mode has been added to the main view that can
  be toggled by pressing CTRL-X. While in cursor mode, any
  operations that would normally work on the "top" line now
  operate on the selected line instead.
• Added CTRL-D and CTRL-U hotkeys to move down/up by half
  a page.
• Added an auto-width flag to the elements of the
  line-format array that indicates that the width of the
  field should automatically be determined by the observed
  values.
• Number fields used in a line-format now default to
  being right-aligned.

Bug Fixes:

• Hidden values in JSON logs are now hidden by default.
• Text with ANSI-escapes is now filtered properly.

lnav v0.11.1

Features:

• Additional validation checks for log formats have been
  added and will result in warnings. Pass -W on the
  command-line to view the warnings. The following new
  check have been added:
  • Each regex must have a corresponding sample log message
    that it matches.
  • Each sample must be matched by only one regex.
• Added built-in support for anonymizing content. The
  :write-* commands now accept an --anonymize option
  and there is an anonymize() SQL function. The
  anonymization process will try to replace identifying
  information with random data. For example, IPv4 addresses
  are replaced with addresses in the 10.0.0.0/8 range.
  (This feature is mainly intended to help with providing
  information to lnav support that does not have sensitive
  values.)
• Added parse_url() and unparse_url() SQL functions for
  parsing URLs into a JSON object and then back again. Note
  that the implementation relies on libcurl which has some
  limitations, like not supporting all types of schemes
  (e.g. mailto:).
• Added the subsecond-field and subsecond-units log
  format properties to allow for specifying a separate
  field for the sub-second portion of a timestamp.
• Added a keymap for Swedish keyboards.

Breaking changes:

• The regexp_capture() table-valued-function now returns NULL
  instead of an empty string for the capture_name column if
  the capture is not named.

Fixes:

• Reduce the "no patterns have a capture" error to a warning
  so that it doesn't block lnav from starting up.
• Some ANSI escape sequences will now be removed before testing
  regexes against a log message.
• If a line in a JSON-lines log file does not start with a
  {, it will now be shown as-is and will not have the JSON
  parse error.

Cost of Doing Business:

• Migrated from pcre to pcre2.

lnav v0.11.1

Features:

• Additional validation checks for log formats have been
  added and will result in warnings. Pass -W on the
  command-line to view the warnings. The following new
  check have been added:
  • Each regex must have a corresponding sample log message
    that it matches.
  • Each sample must be matched by only one regex.
• Added built-in support for anonymizing content. The
  :write-* commands now accept an --anonymize option
  and there is an anonymize() SQL function. The
  anonymization process will try to replace identifying
  information with random data. For example, IPv4 addresses
  are replaced with addresses in the 10.0.0.0/8 range.
  (This feature is mainly intended to help with providing
  information to lnav support that does not have sensitive
  values.)
• Added parse_url() and unparse_url() SQL functions for
  parsing URLs into a JSON object and then back again. Note
  that the implementation relies on libcurl which has some
  limitations, like not supporting all types of schemes
  (e.g. mailto:).
• Added the subsecond-field and subsecond-units log
  format properties to allow for specifying a separate
  field for the sub-second portion of a timestamp.
• Added a keymap for Swedish keyboards.

Breaking changes:

• The regexp_capture() table-valued-function now returns NULL
  instead of an empty string for the capture_name column if
  the capture is not named.

Fixes:

• Reduce the "no patterns have a capture" error to a warning
  so that it doesn't block lnav from starting up.
• Some ANSI escape sequences will now be removed before testing
  regexes against a log message.
• If a line in a JSON-lines log file does not start with a
  {, it will now be shown as-is and will not have the JSON
  parse error.

Cost of Doing Business:

• Migrated from pcre to pcre2.

lnav v0.11.1

Features:

• Additional validation checks for log formats have been
  added and will result in warnings. Pass -W on the
  command-line to view the warnings. The following new
  check have been added:
  • Each regex must have a corresponding sample log message
    that it matches.
  • Each sample must be matched by only one regex.
• Added built-in support for anonymizing content. The
  :write-* commands now accept an --anonymize option
  and there is an anonymize() SQL function. The
  anonymization process will try to replace identifying
  information with random data. For example, IPv4 addresses
  are replaced with addresses in the 10.0.0.0/8 range.
  (This feature is mainly intended to help with providing
  information to lnav support that does not have sensitive
  values.)
• Added parse_url() and unparse_url() SQL functions for
  parsing URLs into a JSON object and then back again. Note
  that the implementation relies on libcurl which has some
  limitations, like not supporting all types of schemes
  (e.g. mailto:).

Breaking changes:

• The regexp_capture() table-valued-function now returns NULL
  instead of an empty string for the capture_name column if
  the capture is not named.

Fixes:

• Reduce the "no patterns have a capture" error to a warning
  so that it doesn't block lnav from starting up.
• Some ANSI escape sequences will now be removed before testing
  regexes against a log message.

Cost of Doing Business:

• Migrated from pcre to pcre2.

lnav v0.11.1

Features:

• Additional validation checks for log formats have been
  added and will result in warnings. Pass -W on the
  command-line to view the warnings. The following new
  check have been added:
  • Each regex must have a corresponding sample log message
    that it matches.
  • Each sample must be matched by only one regex.
• Added built-in support for anonymizing content. The
  :write-* commands now accept an --anonymize option
  and there is an anonymize() SQL function. The
  anonymization process will try to replace identifying
  information with random data. For example, IPv4 addresses
  are replaced with addresses in the 10.0.0.0/8 range.
  (This feature is mainly intended to help with providing
  information to lnav support that does not have sensitive
  values.)
• Added parse_url() and unparse_url() SQL functions for
  parsing URLs into a JSON object and then back again. Note
  that the implementation relies on libcurl which has some
  limitations, like not supporting all types of schemes
  (e.g. mailto:).

Breaking changes:

• The regexp_capture() table-valued-function now returns NULL
  instead of an empty string for the capture_name column if
  the capture is not named.

Fixes:

• Reduce the "no patterns have a capture" error to a warning
  so that it doesn't block lnav from starting up.

Cost of Doing Business:

• Migrated from pcre to pcre2.

lnav is an advanced log file viewer for the terminal. It can quickly parse and index log files and display them in a single combined view with syntax highlighting.

Downloads

• Linux
  lnav-0.11.0-musl-64bit.zip - A statically linked 64-bit musl binary for linux.
  You can also install via Snap on Linux:

  $ snap install lnav

• MacOS
  lnav-0.11.0-os-x.zip - A statically linked binary for MacOS.

  You can also install via brew:

  brew install lnav

New in this release

Features

• Redesigned the top status area to allow for user-specified
  messages and added a second line that displays an interactive
  breadcrumb bar. The top status line now shows the clock and
  the remaining area displays whatever messages are inserted
  into the lnav_user_notifications table. The information that
  was originally on top is now in a second line and organized
  as breadcrumbs. Pressing ENTER will activate the breadcrumb bar
  and the left/right cursor keys can be used to select a particular
  crumb while the up/down keys can select a value to switch to.
  While a crumb is selected, you can also type in some text to do
  a fuzzy search on the possibilities or, if the crumb represents
  an array of values, enter the index to jump to.
• The pretty-print view will now show breadcrumbs that indicate the
  location of the top line in the view with the prettified structure.
• Markdown files (those with a .md extension) are now rendered in the
  TEXT view. The breadcrumb bar at the top will also be updated
  depending on the section of the document that you are in and you
  can use it to jump to different parts of the doc.
• The ":goto" command will now accept anchor links (i.e. #section-id)
  as an argument when the text file being viewed has sections. You
  can also specify an anchor when opening a file by appending
  "#". For example, "README.md#screenshot".
• Log message comments are now treated as markdown and rendered
  accordingly in the overlay. Multi-line comments are now supported
  as well.
• Metadata embedded in files can now be accessed by the
  "lnav_file_metadata" table. Currently, only the front-matter in
  Markdown files is supported.
• Added an integration with regex101.com to make it easier to edit
  log message regular expressions. Using the new "management CLI"
  (activated by the -m option), a log format can be created from
  a regular expression entry on regex101.com and existing patterns
  can be edited.
• In the spectrogram view, the selected value range is now shown by
  an overlay that includes a summary of the range and the number of
  values that fall in that range. There is also a detail panel at
  the bottom that shows the log-messages/DB-rows whose values are in
  that range. You can then press TAB to focus on the detail view
  and scroll around.
• Add initial support for pcap(3) files using tshark(1).
• SQL statement execution can now be canceled by pressing CTRL+]
  (same as canceling out of a prompt).
• To make it possible to automate some operations, there is now an
  "lnav_events" table that is updated when internal events occur
  within lnav (e.g. opening a file, format is detected). You
  can then add SQLite TRIGGERs to this table that can perform a
  task by updating other tables.
• Tags can automatically be added to messages by defining a pattern
  in a log format. Under a format definition, add the tag name
  into the "tags" object in a format definition. The "pattern"
  property specifies the regular expression to match against a line
  in a file that matches the format. If a match is found, the tag
  will be applied to the log message. To restrict matches to
  certain files, you can add a "paths" array whose object elements
  contain a "glob" property that will be matched against file names.
• Log messages can now be detected automatically via "watch
  expressions". These are SQL expressions that are executed for
  each log message. If the expressions evaluates to true, an
  event is published to the "lnav_events" table that includes the
  message contents.
• Added the "regexp_capture_into_json()" table-valued-function that
  is similar to "regexp_capture()", but returns a single row with a
  JSON value for each match instead of a row for each capture.
• Added a "top_meta" column to the lnav_views table that contains
  metadata related to the top line in the view.
• Added a "log_opid" hidden column to all log tables that contains
  the "operation ID" as specified in the log format.
• Moved the "log_format" column from the all_logs table to a hidden
  column on all tables.
• Add format for UniFi gateway.
• Added a "glob" property to search tables defined in log formats
  to constrain searches to log messages from files that have a
  matching log_path value.
• Initial indexing of large files should be faster. Decompression
  and searching for line-endings are now pipelined, so they happen
  in a thread that is separate from the regular expression matcher.
• Writing to the clipboard now falls back to OSC 52 escape sequence
  if none of the clipboard commands could be detected. Your
  terminal software will need to support the sequence and you may
  need to explicitly enable it in the terminal.
• Added the ":export-session-to " command that writes the
  current session state to a file as a list of commands/SQL
  statements. This script file can be executed to restore the
  majority of the current state.
• Added the "echoln()" SQL function that behaves similarly to the
  ":echo" command, writing its first argument to the current
  output.
• Added "encode()" and "decode()" SQL functions for transcoding
  blobs or text values using one of the following algorithms:
  base64, hex, or uri.
• In regular expressions, capture group names are now semantically
  highlighted (e.g. in the capture, (?\w+), "name" would
  have a unique color). Also, operations or previews that use
  that regular expression will highlight the matched data with
  the same color.
• Added an lnav_views_echo table that is a real SQLite table that
  you can create TRIGGERs on in order to perform actions when
  scrolling in a view.
• Added a "yaml_to_json()" SQL function that converts a YAML
  document to the equivalent JSON.

Breaking Changes

• Formats definitions are now checked to ensure that values have a
  corresponding capture in at least one pattern.
• Added a 'language' column to the lnav_view_filters table that
  specifies the language of the 'pattern' column, either 'regex'
  or 'sql'.
• Timestamps that do not have a day or month are rewritten to a
  full timestamp like YYYY-MM-DD HH:MM:SS.
• Removed the summary overlay at the bottom of the log view that
  displayed things like "Error rate" and the time span. It doesn't
  seem like anyone used it.
• Removed the "log_msg_instance" column from the logline and search
  tables since it causes problems with performance.
• Search tables now search for multiple matches within a message
  instead of stopping at the first hit. Each additional match is
  returned as a separate row. A "match_index" column has been
  added to capture the index of the match within the message.
  The table regex is also compiled with the "multiline" flag enabled
  so the meaning of the '^' and '$' metacharacters are changed
  to match the start/end of a line instead of the start/end of
  the entire message string.
• Search tables defined in formats are now constrained to only
  match log messages that are in that log format instead of all
  log messages. As a benefit, the search table now includes
  the columns that are defined as part of the format.
• The lnav_view_filters table will treats the tuple of
  (view_name, type, language, pattern) as a UNIQUE index and
  will raise a conflict error on an INSERT. Use "REPLACE INTO"
  instead of "INSERT INTO" to ignore conflict error.
• The types of SQL values stored as local variables in scripts
  is now preserved when used as bound variables at a later point
  in the script.

Fixes

• Toggling enabled/disabled filters when there is a SQL expression
  no longer causes a crash.
• Fix a crash related to long lines that are word wrapped.
• Multiple SQL statements in a SQL block of a script are now
  executed instead of just the first one.
• In cases where there were many different colors on screen, some
  text would be colored incorrectly.
• The pretty-print view now handles ANSI escape sequences.
• The "overstrike" convention for doing bold and underline is now
  supported. (Overstrike is a character followed by a backspace
  and then the same character for bold or an underscore for
  underline.)
• The ":eval" command now works with searching (using the '/'
  prefix).

See the NEWS file for more details.

See the NEWS file for more details.

Features:

• Added ":show-only-this-file" command that hides all files except the
  one for the top line in the view.
• The ":write-raw-to" command now accepts a --view flag that specifies
  the source view for the data to write. For example, to write the
  results of a SQL query, you would pass "--view=db" to the command.
• The commands used to access the clipboard are now configured through
  the "tuning" section of the configuration.
• Added an "lnav_version()" SQL function that returns the current
  version string.
• Added basic support for the logfmt file format. Currently, only files
  whose lines are entirely logfmt-encoded are supported. The lines
  must also contain either a field named "time" or "ts" that contains
  the timestamp.
• Added the "logfmt2json()" SQL function to convert a string containing
  a logfmt-encoded message into a JSON object that can be operated on
  more easily.
• Added the "gzip()" and "gunzip()" SQL functions to compress values
  into a blob and decompress a blob into a string.
  Interface changes:
• The xclip implementation for accessing the system clipboard now writes
  to the "clipboard" selection instead of the "primary" selection.
• The 'query' bookmark type and y/Y hotkeys have been removed due to
  performance issues and the functionality is probably rarely used.

Bug Fixes:

• The text "send-input" would show up on some terminals instead of
  ignoring the escape sequence. This control sequence was only
  intended to be used in the test suite.
• Remote file synchronization has been optimized a bit.
• Configuration values loaded from the ~/.lnav/configs directory
  are now included in the default configuration, so they won't be
  saved into the ~/.lnav/config.json user configuration file.
• Key handling in the visual filter editor will no longer swallow
  certain key-presses when editing a filter.
• Scrolling performance restored in the SQL view.
• The ':redirect-to' command now works with '/dev/clipboard'
• The field overlay (opened by pressing 'p') now shows 'log_time'
  for the timestamp field instead of the name defined in the format.
• The search term in the bottom status bar will now update properly
  when switching views.
• The "Out-Of-Time-Order Message" overlay will be shown again.
• The tab for the "Files" panel will be highlighted in red if there
  is an issue opening a file.
• Overwritten files should be reloaded again.
• The "jget()" SQL function now returns numbers with the correct type.
• The "json_contains()" SQL function now returns false if the first
  argument is NULL instead of NULL.
• The local copies of remote files are now cleaned up after a couple
  days of the host not being accessed.
• The initial loading and indexing phase has been optimized.