27 Aug
2017
27 Aug
'17
20:17
On 2017-08-27 19:51, Michael Hirmke wrote:
Hi Carlos,
[...]
Search by log facility. Not sure how it's done, but I'm certain journalctl supports something like that.
No, as far as I know, it doesn't. Search "man journalctl", the word "facility" doesn't exist.
man systemd.journal-fields Ah. Didn't know that page.
But anyway, it doesn't explain how to search on them, just that they are stored in the journal. Which is obvious, the journal has to store at least the same fields as the standard syslog, or it would not be a replacement. The problem is how to access them. Others have said that the trick is using this syntax: journalctl SYSLOG_FACILITY=2 -- Cheers / Saludos, Carlos E. R. (from 42.2 x86_64 "Malachite" (Minas Tirith))