tail + grep (+ awk)

tail -f /var/log/apache2/error.log | grep --line-buffered mod_rewrite
with awk:
tail -f /var/log/messages | grep --line-buffered auth | stdbuf -o0 awk -F" " '{print $2}'