Linux journalctl

From John Freier
Revision as of 14:36, 20 July 2015 by Jfreier (Talk | contribs) (Created page with "JournalCtl is the new way log files get captured. There are a bunch of different command to view them. Count the number of failed ssh authentication for the past hour. jou...")

(diff) ← Older revision | Latest revision (diff) | Newer revision → (diff)
Jump to: navigation, search

JournalCtl is the new way log files get captured. There are a bunch of different command to view them.

Count the number of failed ssh authentication for the past hour. 

 journalctl -u sshd --since "1 hour ago" | grep failure | wc -l
Retrieved from "http://wiki.johnfreier.com/index.php?title=Linux_journalctl&oldid=695"