(stripping systemd-devel) ----- Original Message ----- > Am 22.09.2014 um 14:44 schrieb Jóhann B. Guðmundsson: > > This is simply untrue as "journalctl -o export" will show you. > > where is it in the message? > the process is "systemd" > > how to distinct between user sessions and systemn boot? > ":programname" don't work and ":msg, startswith" don't work > > Mar 18 23:01:01 rawhide systemd[577]: Stopped target Default. > Mar 18 23:01:01 rawhide systemd[577]: Stopping Basic System. > Mar 18 23:01:01 rawhide systemd[577]: Stopped target Basic System. > Mar 18 23:01:01 rawhide systemd[577]: Stopping Paths. In Fedora’s default configuration, in addition to the traditional rsyslog fields, all journal fields are available in rsyslog. Would filtering for $_PID being, or not being, 1, help? Mirek -- devel mailing list devel@xxxxxxxxxxxxxxxxxxxxxxx https://admin.fedoraproject.org/mailman/listinfo/devel Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct