Difference between revisions of "Linux journalctl"

From John Freier
Jump to: navigation, search
(Created page with "JournalCtl is the new way log files get captured. There are a bunch of different command to view them. Count the number of failed ssh authentication for the past hour. jou...")
 
(No difference)

Latest revision as of 14:36, 20 July 2015

JournalCtl is the new way log files get captured. There are a bunch of different command to view them.

Count the number of failed ssh authentication for the past hour.

 journalctl -u sshd --since "1 hour ago" | grep failure | wc -l