journalctl.md (859B)
1 # journalctl 2 3 https://www.loggly.com/ultimate-guide/using-journalctl/ 4 https://www.digitalocean.com/community/tutorials/how-to-use-journalctl-to-view-and-manipulate-systemd-logs 5 6 search by user 7 ``` 8 journalctl _UID=<uid> 9 ``` 10 11 search by command 12 ``` 13 journalctl /usr/bin/sudo 14 journalctl $(which sudo) 15 journalctl -t sudo 16 ``` 17 `-t` show syslog identifier 18 19 show all available values for `_SYSTEMD_UNIT` 20 http://0pointer.de/blog/projects/journalctl.html 21 ``` 22 journalctl -F _SYSTEMD_UNIT 23 ``` 24 25 show login attempts 26 ``` 27 journalctl _SYSTEMD_UNIT=systemd-logind.service 28 journalctl _SYSTEMD_UNIT=systemd-logind.service --since today 29 journalctl _SYSTEMD_UNIT=systemd-logind.service --since yyyy-mm-dd 30 ``` 31 32 ``` 33 journalctl _SYSTEMD_UNIT=gdm.service --since yy-mm-dd 34 sudo grep -A1 "plugin=panel" /home/<user>/.kde/share/config/plasma-desktop-appletsrc 35 ``` 36 37 [systemctl](systemctl)