journalctl Flashcards
Show all fields in full, even if they include unprintable characters or are very long.
journalctl -a
–all
Show only the most recent journal entries, and continuously print new entries as they are appended to the journal.
journalctl -f
–follow
Immediately jump to the end of the journal inside the implied pager tool.
journalctl -e
–pager-end
Show the most recent journal events and limit the number of events shown. Implied if –follow is used.
journalctl -n
Reverse output so that the newest entries are displayed first.
journalctl -r
–reverse
Controls the formatting of the journal entries that are shown.
journalctl -o
Augment log lines with explanation texts from the message catalog. This will add explanatory help texts to log messages in the output where this is avialble.
journalctl -x
–catalog
Suppresses all informational messages (i.e. “– Journal begins at …”, “– Reboot –”), any warning messages regarding inaccessible system journals when run as a normal user.
journalctl -q
–quiet
Show entries interleaved from all available journals, including remote ones.
journalctl -m
–merge
Show a tabular list of boot numbers (relative to the current boot), their IDs, and the timestamps of the first and last message pertaining to the boot.
journalctl –list-boots
Show only kernel messages.
journalctl -k
Show messages for the specified systemd unit UNIT (such as a service unit (chronyd)), or for any of the units matched by PATTERN.
journalctl -u
Print a short help text and exit.
journalctl -h
–help
