journalctl: switches & more with less

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Would it be possible to use switches with the basic KEY=VALUE searches. For instance,

journalctl -g "state changed" _SYSTEMD_UNIT=ModemManager.service + UNIT=ModemManager.service _PID=1 + OBJECT_SYSTEMD_UNIT=ModemManager.service _UID=0 + COREDUMP_UNIT=ModemManager.service

removing the -g "state changed" shows when MM is crasing, but adding it filters all of that out.


or for instance

journalctl -b -1 -u ModemManager + COREDUMP_UNIT=ModemManager.service

This specific example seems like it should not be necessary if I read the manual. But something about `+ COREDUMP_UNIT=name.service _UID=0 MESSAGE_ID=fc2e22bc6ee647b6b90729ab34a250b1` does not show coredumps. The MESSAGE_ID looks extraneous. At any rate, it would be nice to be able to add to --unit switches.

It would also be nice to be able to do something like
journalctl -u ModemManager -k -b -1

I realize that I can do
journalctl _SYSTEMD_UNIT=ModemManager.service + UNIT=ModemManager.service _PID=1 + OBJECT_SYSTEMD_UNIT=ModemManager.service _UID=0 + COREDUMP_UNIT=ModemManager.service + _TRANSPORT=kernel -b -1

But that is kind of long winded for something that feels like it should be intuitively easy.

Version at hand is systemd 252 (252.12-1~deb12u1)
+PAM +AUDIT +SELINUX +APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL +ACL +BLKID +CURL +ELFUTILS +FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY +P11KIT +QRENCODE +TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified




[Index of Archives]     [LARTC]     [Bugtraq]     [Yosemite Forum]     [Photo]

  Powered by Linux