Tail/grep only one ip from pihole.log

General
1

is there any way to tail/grep only one ip from pihole.log?

2

Not as far as I know, but I use this solution to bring some detail in never ending stream of log entries.
After you've installed the required things, in baretail / Preferences / Highlighting, enter the IP address you want to see in color.
Setting up the authentication keys is described here, section 4.10

edit
duckduckgo says there is a way:

tail -f /var/log/pihole.log | grep "<IP address you want to follow>"

/edit

3

@jpgpi250 thank you this works for me

4

This similar command lets you search your pihole logs (not a live tail) for the same information:

sudo grep "<IP address you want to follow>" /var/log/pihole.log for today's log

sudo grep "<IP address you want to follow>" /var/log/pihole.log.1 for yesterday's log

5

one more question how would you grep blocked only for one ip?

6

I don't think that is possible (NOT a Linux expert), the query and the answer are on different lines, only the query contains the IP address.

However, if you install this, you can do a database query

image
image2369×1055 179 KB

7

You can go to the long term data (Admin GUI > Long term data). Toggle the query status options to limit the information displayed to blocked only, and search in the date range you want. In the results page, search for that client.

image
image1015×709 105 KB

8

here is reddit post you might want to follow. NO code yet (27/12/2018 - 12h00) but I assume it will be available soon.

9

thanks for informing me

10

This isn't perfect but I just put this together

#!/usr/bin/env python3

from colorama import Fore

log = open('/var/log/pihole.log', 'r')
search = input('Enter ip: ')

while True:
    for line in log:
        if 'query' in line and search in line:
            print(Fore.RESET + '-------------------------------------')
            print(Fore.GREEN + line)
            for line in log:
                if ('query' in line and search in line):
                    print(Fore.RESET + '-------------------------------------')
                    print(line)
                    break
                elif 'query' in line and search not in line:
                    break
                elif 'forwarded' in line or 'reply' in line or 'cached' in line or 'NXDOMAIN' in line:
                    print(Fore.YELLOW + line)
                    break
                elif 'blocked' in line:
                    print(Fore.RED + line)
                    break
                else:
                    print(line)
                    break