On Thu, Jul 02, 2015 at 11:34:20AM +0800, Ed Greshko wrote:
On 07/02/15 11:11, Alex wrote:
> Hi all,
>
> I've used journalctl to do some really basic things, but I'm trying to
> use it to view the former /var/log/maillog, and haven't been able to
> figure out how.
>
> I understand I can use it to search for a specific priority, but
> haven't figure out how to show only today's mail.* facility logs,
> using the short form hostname. I also understand you can view logs for
> a specific process or pid, but that's also not what I want.
>
> Ideas greatly appreciated. A FAQ or general usage doc would really be
> appreciated (beyond just the man page). It just seems like a lot more
> typing than just "tail -f /var/log/maillog" when that's all I need.
>
Assuming you're running sendmail, it sounds as if you may want....
journalctl -b 0 -u sendmail
or
journalctl -b 0 -r -u sendmail
And, there is the -f option, which is the same as tail's.
Besides Ed's answer to your specific questions, you could look at this
thread for a more general discussion.
http://thread.gmane.org/gmane.linux.redhat.fedora.general/440292
The OP has a useful (but incomplete) usage summary. Also see this
particular post:
http://thread.gmane.org/gmane.linux.redhat.fedora.general/440292/focus=44...
To add to that last post, SYSLOG_IDENTIFIER might be more human
readable. Although I have found often the information may not be
commplete. Sometimes part of the info is still classified as "from the
unit file" and needs to be filtered with -u!
Hope this helps,
--
Suvayu
Open source is the future. It sets us free.