By default, this will display the kernel messages from the current boot. You can specify an alternative boot using the normal boot selection flags discussed previously. For instance, to get the messages from five boots ago, you could type: journalctl-k-b-5 Copy By Priority One filter ...
For example the rfc3164 log format would be defined as <%pri%>%timestamp% %HOSTNAME% %app-name%[%procid%]: %msg% structured_data(defaultnull) Content of structured data section (optional, required by some services to identify the sender). ...
could be _SYSTEMD_UNIT=sshd.service, except that if sshd is # socket-activated, the service name is completely unpredictable. #JOURNAL_MATCHES=SYSLOG_IDENTIFIER=sshd # # LOG_TO_JOURNAL: Instead of writing to a log file, log to the systemd journal # instead. # # When this is enabled, ...