[NTLUG:Discuss] process last 'x' minutes of log entries?

[Rev. wRy]

On Sat, 2003-09-27 at 07:22, Jack Snodgrass wrote:
> I want to grep/egrep/scan/process/etc the last 'x' minutes of log
> entries
> from something like /var/log/messages. 
> 
> I can do a tail -n5000 /var/log/messages and get the last 5000 lines, 
> but I want to be able to get the last 30 minutes and not try and find 
> where they are in the log. 
> 
> Does anyone know of any existing utilites / things that will do this?

logrotate comes to mind.

> Thanks - jack 

Ry