Verbose output with all fields journalctl

Dumps every journal field incl. cursor for an entry; -o json-pretty for machine parsing

journalctl -u <name> -o verbose -n 1

#journalctl #debug #observability

more journalctl all 12 commands →

List boots and read previous boot journalctl --list-boots && journalctl -b -1 -p warning Kernel ring buffer with timestamps journalctl -k -b -o short-precise --grep='segfault|I/O error' Disk usage and vacuum by size/time journalctl --disk-usage; journalctl --vacuum-size=500M --vacuum-time=2d Follow logs by syslog identifier journalctl -t kernel -t sudo -f --no-hostname Project selected fields as columns journalctl -u <name> --output=json --output-fields=__REALTIME_TIMESTAMP,MESSAGE,_PID | jq -r '[.__REALTIME_TIMESTAMP,._PID,.MESSAGE]|@tsv'