<p align="center">
<img src="assets/tailspin.png" width="230"/>
</p>
#
<p align="center">
A log file highlighter
</p>
<p align="center">
<img src="assets/main.png" width="700"/>
</p>
### Features
- 🪵 View (or `tail`) any log file of any format
- 🍰 No setup or config required
- 🌈 Highlights numbers, dates, IP-addresses, UUIDs, URLs and more
- ⚙️ All highlight groups are customizable
- 🧬 Easy to integrate with other commands
- 🔍 Uses `less` under the hood for scrollback, search and filtering
#
### Table of Contents
* [Overview](#overview)
* [Usage](#usage)
* [Installing](#installing)
* [Highlight Groups](#highlight-groups)
* [Watching folders](#watching-folders)
* [Customizing Highlight Groups](#customizing-highlight-groups)
* [Working with `stdin` and `stdout`](#working-with-stdin-and-stdout)
* [Using the pager `less`](#using-the-pager-less)
* [Settings](#settings)
***
## Overview
`tailspin` works by reading through a log file line by line, running a series of regexes
against each line. The regexes recognize patterns you expect to find in a logfile, like dates, numbers, severity
keywords and more.
`tailspin` does not make any assumptions on the format or position of the items it wants to highlight. For this reason,
it requires no configuration and the highlighting will work consistently across different logfiles.
## Usage
The binary name for `tailspin` is `tspin`.
```console
# Read from file and view in `less`
tspin application.log
# Read from file and print to stdout
tspin application.log --print
# Read from stdin and print to stdout
# Read from another command and print to stdout
## Installing
### Package Managers
```console
# Homebrew
brew install tailspin
# Cargo
cargo install tailspin
# Archlinux
pacman -S tailspin
# Nix
nix-shell -p tailspin
# NetBSD
pkgin install tailspin
# FreeBSD
pkg install tailspin
```
### From Source
```console
cargo install --path .
```
Binary will be placed in `~/.cargo/bin`, make sure you add the folder to your `PATH` environment variable.
> [!IMPORTANT]
> When building from source, make sure that you are using the latest version
> of [`less`](http://greenwoodsoftware.com/less/).
## Highlight Groups
### Dates
<p align="center">
<img src="assets/examples/dates.png" width="600"/>
</p>
### Keywords
<p align="center">
<img src="assets/examples/keywords.png" width="600"/>
</p>
### URLs
<p align="center">
<img src="assets/examples/urls.png" width="600"/>
</p>
### Numbers
<p align="center">
<img src="assets/examples/numbers.png" width="600"/>
</p>
### IP Addresses
<p align="center">
<img src="assets/examples/ip.png" width="600"/>
</p>
### Quotes
<p align="center">
<img src="assets/examples/quotes.png" width="600"/>
</p>
### Unix file paths
<p align="center">
<img src="assets/examples/paths.png" width="600"/>
</p>
### HTTP methods
<p align="center">
<img src="assets/examples/http.png" width="600"/>
</p>
### UUIDs
<p align="center">
<img src="assets/examples/uuids.png" width="600"/>
</p>
### Key-value pairs
<p align="center">
<img src="assets/examples/kv.png" width="600"/>
</p>
### Pointer addresses
<p align="center">
<img src="assets/examples/pointers.png" width="600"/>
</p>
### Unix processes
<p align="center">
<img src="assets/examples/processes.png" width="600"/>
</p>
## Watching folders
`tailspin` can listen for newline entries in a given folder. Watching folders is useful for monitoring log files that
are rotated.
<p align="center">
<img src="assets/examples/folder.png" width="600"/>
</p>
When watching folders, `tailspin` will start in follow mode (abort with <kbd>Ctrl + C</kbd>) and will only print
newline entries which arrive after the initial start.
## Customizing Highlight Groups
### Overview
Create `config.toml` in `~/.config/tailspin` to customize highlight groups.
Styles have the following shape:
```toml
style = { fg = "color", bg = "color", italic = false, bold = false, underline = false }
```
To edit the different highlight groups, include them in your `config.toml` file. For example, to edit the `date`
highlight group, add the following to your `config.toml`:
```toml
[date]
style = { fg = "green" }
```
Expand the section below to see the default config for the highlight groups:
<details>
<summary>Default highlight groups settings</summary>
```toml
[date]
number = { fg = "magenta" }
separator = { faint = true }
[date_word] # e.g. "Jan 01", "Mon Feb 28"
day = { fg = "magenta" }
month = { fg = "magenta" }
number = { fg = "magenta" }
[time]
time = { fg = "blue" }
zone = { fg = "red" }
separator = { faint = true }
[[keywords]]
words = ['null', 'true', 'false']
style = { fg = "red", italic = true }
[[keywords]]
words = ['GET']
style = { fg = "black", bg = "green" }
border = true
[url]
http = { fg = "red", faint = true }
https = { fg = "green", faint = true }
host = { fg = "blue", faint = true }
path = { fg = "blue" }
query_params_key = { fg = "magenta" }
query_params_value = { fg = "cyan" }
symbols = { fg = "red" }
[number]
style = { fg = "cyan" }
[ip]
number = { fg = "blue", italic = true }
letter = { fg = "magenta", italic = true }
separator = { fg = "red" }
[quotes]
style = { fg = "yellow" }
token = '"'
[path]
segment = { fg = "green", italic = true }
separator = { fg = "yellow" }
[uuid]
number = { fg = "blue", italic = true }
letter = { fg = "magenta", italic = true }
separator = { fg = "red" }
[pointer]
number = { fg = "blue", italic = true }
letter = { fg = "magenta", italic = true }
separator = { fg = "red" }
[key_value]
key = { faint = true }
separator = { fg = "white" }
[process]
name = { fg = "green" }
separator = { fg = "red" }
id = { fg = "yellow" }
```
</details>
### Disabling Highlight Groups
To disable a highlight group, set the `disabled` field for that group to true:
```toml
[date]
disabled = true
```
### Adding Keywords via config.toml
To add custom keywords, either include them in the list of keywords or add new entries:
```toml
[[keywords]]
words = ['MyCustomKeyword']
style = { fg = "green" }
[[keywords]]
words = ['null', 'true', 'false']
style = { fg = "red", italic = true }
```
### Adding Keywords from the command line
Sometimes it is more convenient to add highlight groups on the fly without having to edit a TOML. To add highlights from
the command line, use the `--words-[red|green|yellow|blue|magenta|cyan]` flag followed by a comma separated list
of words to be highlighted.
<p align="center">
<img src="assets/examples/otf.png" width="800"/>
</p>
### Custom regex highlighters
When you need more control over the highlighting, you can use the regex highlighter. This highlighter allows you to
specify a regex and a style to be applied to the matched text.
It supports one capture group `()`. When found, it will apply the style to the captured text.
```toml
[[regexps]]
regular_expression = 'Started (.*)\.'
style = { fg = "red" }
```
## Working with `stdin` and `stdout`
By default, `tailspin` will open a file in the pager `less`. However, if you pipe something into `tailspin`, it will
print the highlighted output directly to `stdout`. This is similar to running `tspin [file] --print`.
To let `tailspin` highlight the logs of different commands, you can pipe the output of those commands into `tailspin`
like so:
```console
kubectl logs -f pod_name | tspin
```
## Using the pager `less`
### Overview
`tailspin` uses `less` as its pager to view the highlighted log files. You can get more info on `less` via the **man**
command (`man less`) or by hitting the <kbd>h</kbd> button to access the help screen.
### Navigating
Navigating within `less` uses a set of keybindings that may be familiar to users of `vim` or other `vi`-like
editors. Here's a brief overview of the most useful navigation commands:
- <kbd>j</kbd>/<kbd>k</kbd>: Scroll one line up / down
- <kbd>d</kbd>/<kbd>u</kbd>: Scroll one half-page up / down
- <kbd>g</kbd>/<kbd>G</kbd>: Go to the top / bottom of the file
### Follow mode
When you run `tailspin` with the `-f` or `--follow` flag, it will scroll to the bottom and print new lines to the screen
as they're added to the file.
To stop following the file, interrupt with <kbd>Ctrl + C</kbd>. This will stop the tailing, but keep the
file open, allowing you to review the existing content.
To resume following the file from within `less`, press <kbd>Shift + F</kbd>.
### Search
Use <kbd>/</kbd> followed by your search query. For example, `/ERROR` finds the first occurrence of
**ERROR**.
After the search, <kbd>n</kbd> finds the next instance, and <kbd>N</kbd> finds the previous instance.
### Filtering
`less` allows filtering lines by a keyword, using <kbd>&</kbd> followed by the pattern. For instance, `&ERROR` shows
only lines with **ERROR**.
To only show lines containing either `ERROR` or `WARN`, use a regular expression: `&\(ERROR\|WARN\)`.
To clear the filter, use <kbd>&</kbd> with no pattern.
## Settings
```console
-f, --follow Follow the contents of the file
-e, --start-at-end Start at the end of the file
-p, --print Print the output to stdout
-c, --listen-command [CMD] Listen the output (stdout) of the provided command
--config-path [PATH] Use the configuration file from the provided path
--words-[COLOR] [WORDS] Highlight the provided words with the given color
--disable-builtin-keywords Disable the highlighting of all builtin groups
--disable-booleans Disable the highlighting of booleans and nulls
--disable-severity Disable the highlighting of severity levels
--disable-rest Disable the highlighting of REST verbs
```