Why head and tail in Linux CLI? - Purpose & Use Cases

The Big Idea

What if you could instantly see just the part of a huge file you really need, without waiting or scrolling?

The Scenario

Imagine you have a huge log file from a server, and you want to quickly see the first few lines to check the start of the log or the last few lines to see recent events.

Opening the entire file in a text editor or scrolling through thousands of lines manually is frustrating and slow.

The Problem

Manually opening large files can freeze your editor or take a long time to load.

Scrolling to the end to find recent entries wastes time and can cause mistakes if you miss important lines.

Copying and pasting parts of the file is error-prone and inefficient.

The Solution

The head and tail commands let you instantly see just the first or last few lines of any file.

This saves time, avoids loading the whole file, and helps you focus on the important parts quickly.

Before vs After

✗ Before

open bigfile.log and scroll to top or bottom

✓ After

head -n 10 bigfile.log
tail -n 10 bigfile.log

What It Enables

You can instantly peek into any file's start or end, making troubleshooting and data checks fast and easy.

Real Life Example

System admins often use tail -f to watch live updates in log files, catching errors as they happen without opening huge files.

Key Takeaways

Quickly view the start or end of files without loading everything.

Save time and avoid errors from manual scrolling.

Monitor live logs easily with simple commands.

Practice

1. What does the head command do by default when run on a text file?

easy

A. Counts the number of lines in the file

B. Shows the last 10 lines of the file

C. Deletes the first 10 lines of the file

D. Shows the first 10 lines of the file

Solution

1. Step 1: Understand the default behavior of head

   The head command shows the start of a file, by default 10 lines.

2. Step 2: Compare with other options

   tail shows the end, but head shows the beginning lines.

3. Final Answer:

   Shows the first 10 lines of the file -> Option D

4. Quick Check:

   head = first 10 lines [OK]

Hint: Remember: head = start, tail = end of file [OK]

Common Mistakes:

• Confusing head with tail
• Thinking head deletes lines
• Assuming head counts lines

2. Which of the following is the correct syntax to display the last 5 lines of a file named log.txt?

easy

A. tail -n 5 log.txt

B. head -n 5 log.txt

C. tail 5 log.txt

D. head 5 log.txt

Solution

1. Step 1: Identify the command to show last lines

   tail shows the end of a file, so it is used to show last lines.

2. Step 2: Use correct syntax with -n option

   The option -n 5 specifies to show 5 lines. So tail -n 5 log.txt is correct.

3. Final Answer:

   tail -n 5 log.txt -> Option A

4. Quick Check:

   tail -n 5 shows last 5 lines [OK]

Hint: Use -n with tail to specify number of lines [OK]

Common Mistakes:

• Using head instead of tail
• Omitting -n option
• Using tail without -n for line count

3. Given a file data.txt with 20 lines, what will be the output of head -n 3 data.txt | tail -n 2?

medium

A. Lines 2 and 3 of data.txt

B. Lines 1 and 2 of data.txt

C. Lines 18 and 19 of data.txt

D. Lines 3 and 4 of data.txt

Solution

1. Step 1: Understand head -n 3 data.txt

   This command outputs the first 3 lines: lines 1, 2, and 3.

2. Step 2: Apply tail -n 2 on the output

   tail -n 2 takes the last 2 lines of the previous output, so lines 2 and 3.

3. Final Answer:

   Lines 2 and 3 of data.txt -> Option A

4. Quick Check:

   head 3 then tail 2 = lines 2 & 3 [OK]

Hint: Pipe head then tail to slice lines from start [OK]

Common Mistakes:

• Assuming tail works on whole file, not head output
• Confusing line numbers
• Thinking tail -n 2 shows first 2 lines

4. You run head -n 5 file.txt but get an error: head: invalid option -- 'n'. What is the likely cause?

medium

A. The file file.txt does not exist

B. The head command version does not support -n

C. You need to use --lines=5 instead of -n 5

D. You must run the command as root

Solution

1. Step 1: Analyze the error message

   The error says invalid option -- 'n', meaning -n is not recognized.

2. Step 2: Understand command version differences

   Some older or non-GNU versions of head do not support -n and require different syntax.

3. Final Answer:

   The head command version does not support -n -> Option B

4. Quick Check:

   Invalid option error means unsupported flag [OK]

Hint: Check command version if options cause errors [OK]

Common Mistakes:

• Assuming file missing causes option error
• Trying to run as root unnecessarily
• Using wrong syntax without checking version

5. You want to monitor the last 15 lines of a growing log file app.log in real-time but only want to see the newest lines as they appear. Which command combination is best?

hard

A. head -n 15 app.log

B. tail -n 15 app.log

C. tail -n 15 -f app.log

D. head -n 15 -f app.log

Solution

1. Step 1: Understand the need to see last lines and follow updates

   You want the last 15 lines and to watch new lines as they are added.

2. Step 2: Use tail with -n 15 and -f

   tail -n 15 -f app.log shows last 15 lines and follows file changes live.

3. Final Answer:

   tail -n 15 -f app.log -> Option C

4. Quick Check:

   tail -n 15 -f = last 15 lines + live updates [OK]

Hint: Use tail -f to follow file changes live [OK]

Common Mistakes:

• Using head which shows start, not end
• Omitting -f to follow updates
• Using head -f which is invalid