X-Git-Url: http://www.chiark.greenend.org.uk/ucgi/~ianmdlvl/git?p=elogind.git;a=blobdiff_plain;f=man%2Fjournalctl.xml;h=0ed3ca3bc8750b23930ba12575a48d031a9d685d;hp=b8b29b4cb5da2e6f74c9dd5193e3fbc61b356a0f;hb=2a97b03b3b087e724867e7501ae0c1535ee35031;hpb=77a9e8de6572db6ba5ca49023937b67fc835f356
diff --git a/man/journalctl.xml b/man/journalctl.xml
index b8b29b4cb..0ed3ca3bc 100644
--- a/man/journalctl.xml
+++ b/man/journalctl.xml
@@ -21,7 +21,8 @@
along with systemd; If not, see .
-->
-
+journalctl
@@ -83,10 +84,11 @@
field, then they are automatically matched as
alternatives, i.e. the resulting output will show
entries matching any of the specified matches for the
- same field. Finally, if the character
- + appears as separate word on the
- command line, all matches before and after are combined
- in a disjunction (i.e. logical OR).
+ same field. Finally, the character
+ + may appears as a separate word
+ between other terms on the command line. This causes
+ all matches before and after to be combined in a
+ disjunction (i.e. logical OR).
As shortcuts for a few types of field/value
matches, file paths may be specified. If a file path
@@ -97,14 +99,24 @@
_KERNEL_DEVICE= match for the
device.
+ Additional constraints may be added using options
+ , ,
+ etc, to further limit what entries will be shown
+ (logical AND).
+
Output is interleaved from all accessible
journal files, whether they are rotated or currently
being written, and regardless of whether they belong to the
system itself or are accessible user journals.
+ The set of journal files which will be used
+ can be modified using the ,
+ , ,
+ and options, see below.
+
All users are granted access to their private
per-user journals. However, by default, only root and
- users who are members of the adm
+ users who are members of the systemd-journal
group get access to the system journal and the
journals of other users.
@@ -112,14 +124,14 @@
less by default, and long lines are
"truncated" to screen width. The hidden part can be
viewed by using the left-arrow and right-arrow
- keys. Paging can be disabled, see
- and section Environment
- below.
+ keys. Paging can be disabled; see the
+ option and the "Environment"
+ section below.
- When outputing to a tty, lines are colored
+ When outputting to a tty, lines are colored
according to priority: lines of level ERROR and higher
- are colored red, lines of level NOTICE and higher are
- highlighted, and other lines are displayed normally.
+ are colored red; lines of level NOTICE and higher are
+ highlighted; other lines are displayed normally.
@@ -130,33 +142,20 @@
-
-
-
- Prints a short help
- text and exits.
-
-
-
-
-
- Prints a short version
- string and exits.
-
-
-
-
-
- Do not pipe output into a
- pager.
-
-
-
-
+
+
+
+ Ellipsize fields when
+ they do not fit in available columns.
+ The default is to show full fields,
+ allowing them to wrap or be truncated
+ by the pager, if one is used.
- Show all (printable) fields in
- full.
+ The old options
+ /
+ are not useful anymore, except to undo
+ .
@@ -190,10 +189,10 @@
that the pager will not buffer logs of
unbounded size. This may be overridden
with an explicit
- with some other numeric value on the
- command line. Note that this option is
- only supported for the
- less1
+ with some other numeric value while
+ will disable this cap.
+ Note that this option is only supported for the
+ less1
pager.
@@ -205,9 +204,10 @@
journal events and limit the number of
events shown. If
is used,
- this option is implied. The argument,
- a positive integer, is optional, and
- defaults to 10.
+ this option is implied. The argument is
+ a positive integer or all
+ to disable line limiting. The default value is
+ 10 if no argument is given.
@@ -223,7 +223,7 @@
- Reverse output, so the newest
+ Reverse output so that the newest
entries are displayed first.
@@ -233,53 +233,157 @@
Controls the
formatting of the journal entries that
- are shown. Takes one of
- short,
- short-monotonic,
- verbose,
- export,
- json,
- json-pretty,
- json-sse,
- cat. short
- is the default and generates an output
- that is mostly identical to the
- formatting of classic syslog
- files, showing one line per journal
- entry. short-monotonic
- is very similar but shows monotonic
- timestamps instead of wallclock
- timestamps. verbose
- shows the full structured entry items
- with all
- fields. export
- serializes the journal into a binary
- (but mostly text-based) stream
- suitable for backups and network
- transfer (see Journal
- Export Format for more
- information). json
- formats entries as JSON data
- structures, one per
- line (see Journal
- JSON Format for more
- information). json-pretty
- also formats entries as JSON data
- structures, but formats them in
- multiple lines in order to make them
- more readable for
- humans. json-sse
- also formats entries as JSON data
- structures, but wraps them in a format
- suitable for Server-Sent
- Events. cat
- generates a very terse output only
- showing the actual message of each
- journal entry with no meta data, not
- even a timestamp.
+ are shown. Takes one of the following options:
+
+
+
+
+
+
+
+ is the default
+ and generates an output
+ that is mostly identical
+ to the formatting of
+ classic syslog files,
+ showing one line per
+ journal entry.
+
+
+
+
+
+
+
+
+ is very similar,
+ but shows ISO 8601
+ wallclock timestamps.
+
+
+
+
+
+
+
+
+
+ is very similar,
+ but shows timestamps
+ with full microsecond
+ precision.
+
+
+
+
+
+
+
+
+
+ is very similar,
+ but shows monotonic
+ timestamps instead of
+ wallclock timestamps.
+
+
+
+
+
+
+
+
+
+ shows the
+ full-structured entry
+ items with all fields.
+
+
+
+
+
+
+
+
+
+ serializes the
+ journal into a binary
+ (but mostly text-based)
+ stream suitable for
+ backups and network
+ transfer (see Journal
+ Export Format
+ for more
+ information).
+
+
+
+
+
+
+
+
+ formats entries
+ as JSON data structures,
+ one per line (see Journal
+ JSON Format for
+ more information).
+
+
+
+
+
+
+
+
+ formats entries as
+ JSON data structures,
+ but formats them in
+ multiple lines in order
+ to make them more
+ readable by humans.
+
+
+
+
+
+
+
+
+ formats entries as
+ JSON data structures,
+ but wraps them in a
+ format suitable for Server-Sent
+ Events.
+
+
+
+
+
+
+
+
+ generates a very
+ terse output, only
+ showing the actual
+ message of each journal
+ entry with no metadata,
+ not even a timestamp.
+
+
+
+
+
+
+
+
+
+
+ Express time in Coordinated Universal
+ Time (UTC).
@@ -295,7 +399,7 @@
context of an error or log event,
possible solutions, as well as
pointers to support forums, developer
- documentation and any other relevant
+ documentation, and any other relevant
manuals. Note that help texts are not
available for all messages, but only
for selected ones. For more
@@ -303,7 +407,14 @@
please refer to the Message
Catalog Developer
- Documentation.
+ Documentation.
+
+ Note: when attaching
+ journalctl output
+ to bug reports, please do
+ not use
+ .
+
@@ -311,8 +422,8 @@
Suppresses any warning
- message regarding inaccessible system
- journals when run as normal
+ messages regarding inaccessible system
+ journals when run as a normal
user.
@@ -327,39 +438,111 @@
-
-
+
+
+
+ Show messages from a specific
+ boot. This will add a match for
+ _BOOT_ID=.
+
+ The argument may be empty, in which case
+ logs for the current boot will be shown.
+
+ If the boot ID is omitted, a positive
+ offset will look up
+ the boots starting from the beginning of the
+ journal, and a equal-or-less-than zero
+ offset will look up
+ boots starting from the end of the
+ journal. Thus, 1 means the
+ first boot found in the journal in
+ chronological order, 2 the
+ second and so on; while -0
+ is the last boot, -1 the
+ boot before last, and so on. An empty
+ offset is equivalent
+ to specifying -0, except
+ when the current boot is not the last boot
+ (e.g. because was
+ specified to look at logs from a different
+ machine).
+
+ If the 32-character
+ ID is specified, it
+ may optionally be followed by
+ offset which
+ identifies the boot relative to the one given by
+ boot ID. Negative
+ values mean earlier boots and a positive values
+ mean later boots. If
+ offset is not
+ specified, a value of zero is assumed, and the
+ logs for the boot given by
+ ID are shown.
+
+
+
+
+
+
+
- Show data only from
- current boot. This will add a match
- for _BOOT_ID= for
- the current boot ID of the
- kernel.
+ Show a tabular list of
+ boot numbers (relative to the current
+ boot), their IDs, and the timestamps
+ of the first and last message
+ pertaining to the boot.
+
- Show kernel messages from
- current boot. This implies
- and adds the match _TRANSPORT=kernel.
+ Show only kernel messages. This
+ implies and adds the match
+ _TRANSPORT=kernel.
+
+
+
+
+ Show messages for the
+ specified syslog identifier
+ SYSLOG_IDENTIFIER, or
+ for any of the messages with a SYSLOG_IDENTIFIER
+ matched by PATTERN.
+
+ This parameter can be specified
+ multiple times.
+
+
-
+ Show messages for the
- specified systemd unit. This will add
- a match for messages from the unit
- (_SYSTEMD_UNIT=)
- and additional matches for messages
- from systemd and messages about
- coredumps for the specified unit.
- This parameter can be specified multiple times.
-
+ specified systemd unit
+ UNIT (such
+ as a service unit), or for any of the
+ units matched by
+ PATTERN.
+ If a pattern is specified, a list of
+ unit names found in the journal is
+ compared with the specified pattern
+ and all that match are used. For each
+ unit name, a match is added for
+ messages from the unit
+ (_SYSTEMD_UNIT=UNIT),
+ along with additional matches for
+ messages from systemd and messages
+ about coredumps for the specified
+ unit.
+
+ This parameter can be specified
+ multiple times.
@@ -391,7 +574,7 @@
the form FROM..TO. The log levels are
the usual syslog log levels as
documented in
- syslog3,
+ syslog3,
i.e. emerg (0),
alert (1),
crit (2),
@@ -422,6 +605,28 @@
cursor.
+
+
+
+ Start showing entries
+ from the location in the journal
+ after the
+ location specified by the this cursor.
+ The cursor is shown when the
+ option
+ is used.
+
+
+
+
+
+ The cursor is shown after the last
+ entry after two dashes:
+ -- cursor: s=0639...
+ The format of the cursor is private
+ and subject to change.
+
+
@@ -469,7 +674,7 @@
Show messages from
system services and the kernel (with
- ). Show
+ ). Show
messages from service of current user
(with ).
If neither is specified, show all
@@ -477,6 +682,16 @@
+
+
+
+
+ Show messages from a
+ running, local container. Specify a
+ container name to connect
+ to.
+
+
@@ -493,7 +708,7 @@
- Takes a file glob as
+ Takes a file glob as an
argument. If specified, journalctl will
operate on the specified journal files
matching GLOB
@@ -507,7 +722,7 @@
Takes a directory path
- as argument. If specified, journalctl
+ as an argument. If specified, journalctl
will operate on catalog file hierarchy
underneath the specified directory
instead of the root directory
@@ -521,8 +736,8 @@
Instead of showing
- journal contents, generate a new 128
- bit ID suitable for identifying
+ journal contents, generate a new 128-bit
+ ID suitable for identifying
messages. This is intended for usage
by developers who need a new
identifier for a new message they
@@ -552,16 +767,16 @@
List the contents of
- the message catalog, as table of
- message IDs plus their short
+ the message catalog as a table of
+ message IDs, plus their short
description strings.If any
- ID128s are
+ 128-bit-IDs are
specified, only those entries are shown.
@@ -569,18 +784,18 @@
Show the contents of
the message catalog, with entries
separated by a line consisting of two
- dashes and the id (the format is the
+ dashes and the ID (the format is the
same as .catalog
- files.
+ files).If any
- ID128s are
+ 128-bit-IDs are
specified, only those entries are shown.
@@ -592,7 +807,7 @@
Update the message
catalog index. This command needs to
be executed each time new catalog
- files are installed, removed or
+ files are installed, removed, or
updated to rebuild the binary catalog
index.
@@ -608,18 +823,23 @@
sealing key is stored in the journal
data directory and shall remain on the
host. The verification key should be
- stored externally. Also see the
+ stored externally. Refer to the
option in
journald.conf5
- for details.
+ for information on Forward Secure
+ Sealing and for a link to a refereed
+ scholarly paper detailing the
+ cryptographic theory it is based on.
+
- When --setup-keys is passed and
- Forward Secure Sealing has already been set up,
- recreate FSS keys.
+ When
+ is passed and
+ Forward Secure Sealing (FSS) has already been
+ configured, recreate FSS keys.
@@ -658,31 +878,34 @@
operation.
+
+
+
+ Asks the Journal
+ daemon to flush any log data stored in
+ /run/log/journal
+ into
+ /var/log/journal,
+ if persistent storage is enabled. This
+ call does not return until the
+ operation is
+ complete.
+
+
+
+
+ Exit status
- On success, 0 is returned, a non-zero failure
- code otherwise.
+ On success, 0 is returned; otherwise, a non-zero
+ failure code is returned.
-
- Environment
-
-
-
- $SYSTEMD_PAGER
- Pager to use when
- is not given;
- overrides $PAGER. Setting
- this to an empty string or the value
- cat is equivalent to passing
- .
-
-
-
+ Examples
@@ -721,6 +944,14 @@
journalctl /dev/sda
+ Show all kernel logs from previous boot:
+
+ journalctl -k -b -1
+
+ Show a live log display from a system service apache.service:
+
+ journalctl -f -u apache
+
@@ -729,6 +960,7 @@
systemd1,
systemd-journald.service8,
systemctl1,
+ coredumpctl1,
systemd.journal-fields7,
journald.conf5