6 These might help you: journalctl -u foo.service | tail -n 2 or replace 2 with expected number of lines journalctl -u foo.service --since='2016-04-11 13:00:00' You can as well combine them to get firstly the last run time timestamp, and then use that timestamp with the --since switch.
How to disable the chopping of long lines when invoking journalctl -b in order to see the whole journal message ? E.g. the line get truncated: Jul 09 20:47:57 myubuntu org.kde.kglobalaccel[1452]:
4 With journalctl version 247.3-7 (as systemd), the --grep (or -g) option allows to filter lines in journal where MESSAGE field contain a string or match a regular expression. man journalctl says : -g, --grep= Filter output to entries where the MESSAGE= field matches the specified regular expression.
Is there a way to make journalctl show logs from "the last time foo ...
The original question titles "How do you use systemd's journalctl patterns ". This points to a very specific feature of the journalctl called "MATCHES" rather than a generic regular expression filtering. The "MATCHES" feature is fully detailed along with all other features at its friendly man page which states at its very beginning: If one or more match arguments are passed, the output is ...
journalctl --user-unit SERVICENAME works fine even with storage set to volatile. But any of -u SERVICENAME, --user -u SERVICENAME or --user --user-unit SERVICENAME do not work with volatile storage, they all just show "no entries".
permissions - How to allow a user to use journalctl to see user ...
How do I find out a list of journalctl log size by unit?