On 2024-12-16 04:05, Wietse Venema via Postfix-users wrote: >> >> # journalctl -o json-pretty --since -2m > > This assues that one already knows when some event of interest > happened.
I'm not sure what do you mean - I gave you examples for querying journal, you don't have to use any of these selectors and simply run journalctl to see all of them. >> # journalctl -u session-c219.scope > > This assumes that one aready knows what session scope to search for. This allows to backtrack events of interest extending/related to the single log entry. Impossible with syslog. >> # journalctl -u postfix | grep fatal > > Right. Yes, there was nothing fatal in postfix.service. >> # journalctl --identifier=postfix/postdrop >> # journalctl _EXE=/usr/sbin/postdrop > > Both assume that one already knows the event of interest involved > the postdrop command. Not more than: grep "something" /var/log/maillog requires to know I'm looking for "something". _______________________________________________ Postfix-users mailing list -- postfix-users@postfix.org To unsubscribe send an email to postfix-users-le...@postfix.org