Difference between revisions of "Linux journalctl"
From John Freier
(Created page with "JournalCtl is the new way log files get captured. There are a bunch of different command to view them. Count the number of failed ssh authentication for the past hour. jou...") |
(No difference)
|
Latest revision as of 14:36, 20 July 2015
JournalCtl is the new way log files get captured. There are a bunch of different command to view them.
Count the number of failed ssh authentication for the past hour.
journalctl -u sshd --since "1 hour ago" | grep failure | wc -l