26.02.2025 17:17, Carlos E. R. wrote:
On 2025-02-26 14:34, Andrei Borzenkov wrote:
On Wed, Feb 26, 2025 at 3:43 PM Carlos E. R. <robin.listas@telefonica.net> wrote:
I use "meld" to find out the differences. Lines like this are missing:
Feb 18 12:17:58 Telcontar sddm[2599]: Initializing...
That's fac 1. kern?
Why? Just use
journalctl -o verbose ...
to show all fields including SYSLOG_FACILITY
Thanks. There is no facility. That's why the filter fails:
Yes, journal does not support negative or "has (not)" style of matches.
Tue 2025-02-18 12:17:58.798499 CET [s=918bfecad21d42deb9d5de39b387f803;i=2020bf;b=509c9ed60df74c27a8db34cbd742e899;m=3d08fc1;t=62e68cb1394a8;x=eaecf4382c2d69a3] _BOOT_ID=509c9ed60df74c27a8db34cbd742e899 _MACHINE_ID=2ce1d54548517a7307c1c2bc38206d00 _HOSTNAME=Telcontar PRIORITY=7 _UID=0 _GID=0 _SELINUX_CONTEXT=unconfined _SYSTEMD_SLICE=system.slice _TRANSPORT=journal
Transport is journal which means SDDM is using native journal API and is responsible for providing any metadata. bor@bor-Latitude-E5450:~$ journalctl -b --system -o json | jq -r ._TRANSPORT | sort -u driver journal kernel stdout syslog bor@bor-Latitude-E5450:~$ And if we look where SYSLOG_FACILITY is missing bor@bor-Latitude-E5450:~$ journalctl -b --system -o json | jq -r 'select(has("SYSLOG_FACILITY")|not)| ._TRANSPORT' | sort -u journal bor@bor-Latitude-E5450:~$ and bor@bor-Latitude-E5450:~$ journalctl -b --system -o json | jq -r 'select(has("SYSLOG_FACILITY")|not)| ._CMDLINE' /usr/libexec/udisks2/udisksd /usr/libexec/gnome-remote-desktop-daemon --system /usr/libexec/udisks2/udisksd /usr/libexec/geoclue /usr/libexec/udisks2/udisksd /usr/libexec/udisks2/udisksd /usr/libexec/udisks2/udisksd bor@bor-Latitude-E5450:~$ In principle, you can use JSON output format together with any JSON processing tool to filter out anything you (do not) want and cobble together log lines in any form.
_CAP_EFFECTIVE=1ffffffffff _RUNTIME_SCOPE=system _SYSTEMD_CGROUP=/system.slice/display-manager.service _SYSTEMD_UNIT=display-manager.service _SYSTEMD_INVOCATION_ID=df5baf58bb93441b9b4e8cda6cdc78cf CODE_FILE=unknown CODE_LINE=0 CODE_FUNC=unknown SYSLOG_IDENTIFIER=sddm _PID=2599 _COMM=sddm _EXE=/usr/bin/sddm _CMDLINE=/usr/bin/sddm MESSAGE=Xauthority path: "/run/sddm/xauth_eBLdze" _SOURCE_REALTIME_TIMESTAMP=1739877478798499 Tue 2025-02-18 12:17:58.798515 CET [s=918bfecad21d42deb9d5de39b387f803;i=2020c0;b=509c9ed60df74c27a8db34cbd742e899;m=3d09062;t=62e68cb139549;x=abf76af6229d948a] ...