Quickie: Grep & Tail -f With Notepad++, (Mon, Sep 5th)

Notepad++ Logo
Notepad++ Logo

Notepad++ is a free and open source text editor for Windows.

You can simulate grep-like functionality with Notepad++ in 2 steps:

  1. Use find with a search pattern to bookmark all found lines
  2. Remove unmarked lines


A Windows event log as CSV file:

Start a search (Search / Find… or CTRL-F) and select the Mark tab:

Then do the following:

  1. clear all bookmarks, in case there are any left from previous operations
  2. type your search text (can be regex)
  3. toggle Bookmark line
  4. press Mark All button
  5. press Close button

After presing the Mark All button, you will see how many lines have been bookmarked:

Then go to Search / Bookmark / Remove Unmark Lines:

And you have you grep result:

If you to this with a file on disk that you don’t want to modify, make sure not to save anything after the grep (or work on a copy).

It is also possible to do a “grep -v”: select “Remove Bookmarked Lines”.

Next tip: tail -f with Notepad++

When a text file is open, the Monitoring icon in the toolbar is enabled:

Press the button and the tab of the open text file will get a Monitoring icon:

From now on, lines appended to the file will appear automatically:

Notice that a monitored file can not be edited.

Didier Stevens
Senior handler
Microsoft MVP

(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.

Photo Credit:

English: Logo of the free text editor Notepad++.
Date 12 November 2012
Source Notepad++ website [1]
Author Dan Ho
The chameleon used in the Notepad++ Logo was originally created by Hayes Roberts (see [2] on his website bluebison.net.)
(Reusing this file)
w:en:Creative Commons
attribution share alike
This file is licensed under the Creative Commons Attribution-Share Alike 3.0 Unported license.

Reposted from SANS. View original.

Alex Post