For those not familiar with “journalctl” here are a few frequently use commands to search log files. Using a Terminal/Console. With or without filter.
-
journalctl -xe
will return the default view to search log without filter -
journalctl -S "3 hour ago"
will return logs since 3 hours ago. In other words, with a time filter. -
journalctl --list-boots
will list all the boots you can choose from before searching the log -
journalctl -b -0
orjournalctl -b -1
will search a specific boot. In this example the number 0 and 1 are the unique id of the boot. -
journalctl -u crond.service
will search the log of a specific service -
More commands at https://www.linuxsecrets.com/3653-journalctl-to-view-and-manipulate-systemd-logs or https://archive.ph/2scLB