Personally I like to rsync the logs locally so I can have the context of the errors and also historical data, the later can be useful for blame avoidance. I als

Personally I like to rsync the logs locally so I can have the context of the errors and also historical data, the later can be useful for blame avoidance. I also prefer awk's pattern matching for the filtering, counting, etc. Especially on legacy code where some errors aren't really errors, or errors that aren't for me, etc. The hardest/funnest bug I ever fixed was from grepping several years worth of log files and noticing that an error occasionally happened within 5 seconds of each other. From that realization I just had to search the code base for "sleep(5000)" to find the problem. If you have a lot of environments, servers or apps I highly recommend recutils over a hosts file too.