On Wed, 17.07.13 11:48, Bill Nottingham (notting@xxxxxxxxxx) wrote: > John.Florian@xxxxxxxx (John.Florian@xxxxxxxx) said: > > > You can provide binary path (_EXE=) by ”journalctl /usr/sbin/sshd”. > > > > Yes, but that's of little help with applications using interpreted > > languages (e.g., python). I want to match on the name of the python > > program, not python itself. > > journalctl _COMM=<blah> works for me on F19. Also, to mention this explicitly: there is command line completion for this. I.e. type "journalctl _CO", press Tab, and it will autocomplete to "journalctl _COMM=", then press Tab Tab and it shows you a list of all values that so far have been recorded. This is realy, really useful actually. Lennart -- Lennart Poettering - Red Hat, Inc. -- devel mailing list devel@xxxxxxxxxxxxxxxxxxxxxxx https://admin.fedoraproject.org/mailman/listinfo/devel