« Back to Systemd: Frequently Asked Questions

How to see only recent journal entries

This article has last been updated at .

How to see only recent journal entries?

Run journalctl and apply a time filter by using the '--since' option.

journalctl --since="today"

The journalctl command shows by default the oldest entries it has in the journal. Typically we are not interested in that, for that purpose there is the --since= option. This option defines that entries should be after the specified moment in time. Besides using an actual date, a shortened name like ’today’ can also be used that automatically defines the date and time.

Usage

To see the entries of today, use the aptly named ’today'.

journalctl --since="today"

Looking for a very recent entry? Define a period in minutes.

journalctl --since="15 min ago"

Want to be really precise? Define the date and time.

journalctl --since="2024-06-15 02:15:30"

Learn more about journalctl

This article uses the journalctl command to achieve its tasks. For this popular tool there is a cheat sheet available!

» Mastering the tool: journalctl

journalctl

Other questions related to Systemd

Feedback

Small picture of Michael Boelen

This article has been written by our Linux security expert Michael Boelen. With focus on creating high-quality articles and relevant examples, he wants to improve the field of Linux security. No more web full of copy-pasted blog posts.

Discovered outdated information or have a question? Share your thoughts. Thanks for your contribution!

Mastodon icon

Related articles

Like to learn more? Here is a list of articles within the same category or having similar tags.