« Back to Systemd: Frequently Asked Questions

How to see only recent journal entries

How to see only recent journal entries?

Run journalctl and apply a time filter by using the '--since' option.

journalctl --since="today"

The journalctl command shows by default the oldest entries it has in the journal. Typically we are not interested in that, for that purpose there is the --since= option. This option defines that entries should be after the specified moment in time. Besides using an actual date, a shortened name like ’today’ can also be used that automatically defines the date and time.

Usage

To see the entries of today, use the aptly named ’today'.

journalctl --since="today"

Looking for a very recent entry? Define a period in minutes.

journalctl --since="15 min ago"

Want to be really precise? Define the date and time.

journalctl --since="2024-06-15 02:15:30"

Learn more about journalctl

This article uses the journalctl command to achieve its tasks. For this popular tool there is a cheat sheet available!

» Mastering the tool: journalctl

journalctl cheat sheet

Other questions related to Systemd

    Related articles

    Like to learn more? Here is a list of articles within the same category or having similar tags.

    Feedback

    Small picture of Michael Boelen

    This article has been written by our Linux security expert Michael Boelen. With focus on creating high-quality articles and relevant examples, he wants to improve the field of Linux security. No more web full of copy-pasted blog posts.

    Discovered outdated information or have a question? Share your thoughts. Thanks for your contribution!

    Mastodon icon