Skip to main content

journalctl

https://man7.org/linux/man-pages/man1/journalctl.1.html

journalctl --disk-usage

# log from current boot
journalctl -b
# previous boot
journalctl -b -1

# list all boots
journalctl --list-boots

journalctl -g fail

sudo journalctl --rotate --vacuum-time=4d

journalctl -p 0|1|2|3|4|5|6|7
journalctl -p 3..3

journalctl --facility auth|cron|...|user

# priority 4 daemon messages that have come up since yesterday
# -S, --since=, -U, --until=
journalctl --facility daemon -p 4..4 -S yesterday
# -- Journal begins at Tue 2022-02-22 22:53:51 CST, ends at Sat 2022-02-26 14:21:41 CST. --
# Feb 26 09:33:37 pve pvestatd[1318]: auth key pair too old, rotating.

journalctl --facility=help

# user id
journalctl _UID=1002

# systemd unit
journalctl -u node_exporter.service -o json|json-pretty

journalctl -u apache2 -S yesterday -U today -o json --no-pager | tee apache2.json