ccze

Colorize log file

$ cat [/var/log/syslog] | ccze

$ tail -f [/var/log/syslog] | ccze

$ cat [logfile] | ccze -A | less -R

$ cat [logfile] | ccze -h > [output.html]

$ cat [logfile] | ccze -A -o nolookups | less -R

$ ccze -l

ccze [options]

ccze is a modular log colorizer written in C for high performance. It reads log data from standard input and outputs colorized text using ANSI escape codes or HTML, making log files much easier to scan visually.
The tool uses a plugin architecture to recognize and colorize different log formats including syslog, Apache httpd, Postfix, Squid, Exim, fetchmail, procmail, and vsftpd. Each plugin understands the structure of its target log format and applies appropriate colors to timestamps, hostnames, severity levels, and other fields.
Output defaults to ncurses mode but the `-A` flag produces raw ANSI output suitable for piping to `less -R` or other tools.

-A, --raw-ansi

Generate raw ANSI output

Set color for key

Convert UNIX timestamps to readable format

Generate HTML output

List available plugins

Load specific plugin

Set option (e.g., nolookups)

/etc/cczerc

System-wide configuration

User configuration

Located in /usr/lib/ccze and ~/.ccze. Support for:
- syslog, httpd, postfix
- squid, exim, fetchmail
- procmail, vsftpd, xferlog
- ulogd, apm

Use -o nolookups for faster processing of long logs. Lookups resolve usernames and services but slow down colorization.

tail(1), less(1), multitail(1)