On 2016-03-03 18:40, Per Jessen wrote:
Carlos E. R. wrote:
I previously used grep on the log to show that the majority of entries came from mail and news system. And I used grep because I have not found the way to tell journalctl to print simply the entries for one of the "facilities", in this case, "mail".
cer@Telcontar:~> man journalctl | grep facility
On that page look for MATCHES, then look up:
man systemd.journal-fields
I did a moment ago. But it looked like it wanted the numeric value.
Try this:
journalctl -b 0 SYSLOG_FACILITY=mail
At this point, it produces nothing. I restarted the service some hours ago, and this entry in the config seems to have effect: MaxLevelStore=warning The log now contains just 10 lines, thus I managed to about impeding the journal from growing too much. Also, it is saying now: Mar 03 18:51:50 Telcontar systemd-journal[9751]: Runtime journal is using 380.0K (max 50.0M, leaving 600.1M of free 3.9G, current limit 50.0M). So the size limit finally now applies.
I still prefer "less /var/log/mail". Takes less time to type and less man page lookups :-)
Yep :-) -- Cheers / Saludos, Carlos E. R. (from 13.1 x86_64 "Bottle" at Telcontar)