Journalctl

journalctl is a tool to view the logs collected by systemd.

Useful Commands

Looking at logs for a certain time

journalctl --since "2018-11-09 09:00:00" --until "2018-11-09 10:00:00"

Dates should be specified as YYYY-MM-DD HH:MM:SS

Filter by error level

journalctl -p [0-7]

0: emerg 1: alert 2: crit 3: err 4: warning 5: notice 6: info 7: debug

Further Reading

• https://www.digitalocean.com/community/tutorials/how-to-use-journalctl-to-view-and-manipulate-systemd-logs
• https://www.linode.com/docs/quick-answers/linux/how-to-use-journalctl/