Reviewing a busy interface log on a subscriber-aggregation router at a rural cooperative, a technician wants to see every logged line except the routine keepalive messages, which are cluttering the view. Which pipe modifier hides only the matching lines while showing everything else?
Select an answer to reveal the explanation.
Short Explanation
Sometimes the noise you want gone is the easy part to describe, not the signal you're after. Except flips the usual filtering logic: instead of keeping only matching lines, it hides them and shows you everything that's left.
Full Explanation
The except pipe modifier is the inverse of match: rather than displaying only lines that contain the given pattern, it suppresses those lines and displays every other line in the output, which is exactly the behavior needed to hide routine keepalive messages while still seeing the rest of a busy log. Last only trims output to a specified number of trailing lines based on position, with no concept of excluding lines by content, so it would not selectively remove keepalive noise scattered throughout the log. Display set reformats configuration output into flat set-style syntax, which has no relevance to filtering operational log entries by content. No-more only disables the interactive pause-and-continue pagination of long output; it does not remove or filter any lines, so the same clutter would still be present, just delivered without interruption. A related consideration is that except, like match, accepts regular expressions, so a slightly more specific pattern than just the word keepalive may be needed if other unrelated log lines happen to contain a similar substring, to avoid unintentionally hiding something that should stay visible.