Comment by lubutu

You can do...

  <access.log head -n 500 | grep ...

... though that's less familiar to many, I'm sure.