On 2017-08-28 18:11, Per Jessen wrote:
Carlos E. R. wrote:
On 2017-08-27 19:51, Michael Hirmke wrote:
Hi Carlos,
[...]
Search by log facility. Not sure how it's done, but I'm certain journalctl supports something like that.
No, as far as I know, it doesn't. Search "man journalctl", the word "facility" doesn't exist.
man systemd.journal-fields Ah. Didn't know that page.
But anyway, it doesn't explain how to search on them, just that they are stored in the journal. Which is obvious, the journal has to store at least the same fields as the standard syslog, or it would not be a replacement. The problem is how to access them.
Just to be complete - it is in fact all mentioned in the first few lines of the journalctl man page:
If one or more match arguments are passed, the output is filtered accordingly. A match is in the format "FIELD=VALUE", e.g. "_SYSTEMD_UNIT=httpd.service", referring to the components of a structured journal entry. See systemd.journal-fields(7) for a list of well-known fields.
Ugh :-( Yes, I saw that paragraph years ago. Badly written and useless unless you are an scholar, following tracks. They could have written instead actual use examples. I wonder why trained documentation writers do not contribute. -- Cheers / Saludos, Carlos E. R. (from 42.2 x86_64 "Malachite" at Telcontar)