Journalctl command allows to query the contents of the systemd journal/logs.

Configuration

• /etc/systemd/journald.conf

Basic Commands

• journalctl^[1] or journalctl --no-pager
• journalctl -r (reverse order)
• journalctl -k : Show only kernel messages
• journalctl -f (follow)
• journalctl -u service-name.service

journalctl -u libvirtd

• journalctl --verify
• Disk Usage/Logging: journalctl --disk-usage
• journalctl --vacuum-size=200M^[2]
  • --vacuum-size=BYTES Reduce disk usage below specified size
  • --vacuum-files=INT Leave only the specified number of journal files
  • --vacuum-time=TIME Remove journal files older than specified time
• journalctl --list-boots. See also: last (command)

See also

• systemd and related daemons: systemd, systemd-journald, systemd-logind, systemd-networkd (networkctl), systemd-timesyncd, systemd-resolved and systemd-udevd^[3]
• /etc/inittab^[4] and respawn option^[5]
• systemctl
• launchd init and operating system service management daemon for MacOS