journalctl

`journalctl` is a command-line utility for querying and analyzing system logs:

Centralized Logging

`journalctl` interacts with the systemd journal, a centralized log management system.

Rich Metadata

Log entries in `journalctl` include detailed metadata like timestamps, service names, and more.

Filtering and Querying

Users can filter log entries by time, severity, keywords, and more.

Real-time Monitoring

`journalctl` offers real-time log monitoring, displaying new entries as they are generated.

Unit and Service Information

View log entries associated with specific systemd units, services, or processes.

Human-Readable Output

`journalctl` formats log data for easy human reading, including color-coded entries.

Structured Logging

Systemd journal supports structured logging with key-value pairs.