Filter by priority error and above journalctl
Only err/crit/alert/emerg from current boot; -p takes a range too (e.g. -p warning..err)
journalctl -p err -b --no-pager
more journalctl
all 12 commands →
Match by raw systemd unit field
journalctl _SYSTEMD_UNIT=sshd.service --since today
Combine field filters with OR
journalctl _PID=1 + _COMM=sshd -o short-iso
Regex grep across messages
journalctl --grep='oom|out of memory' --case-sensitive=false -b
Verbose output with all fields
journalctl -u <name> -o verbose -n 1
List boots and read previous boot
journalctl --list-boots && journalctl -b -1 -p warning