====== journalctl  ======
===== Show Logs =====
<code bash>
# All log entries for postfix
journalctl _UID=`id -u postfix` --no-pager
# Or
journalctl _SYSTEMD_UNIT=postfix@-.service
journalctl _SYSTEMD_UNIT=ssh.service
journalctl -u ssh.service
journalctl -u ssh.service -u postfix@-.service
</code>

<code bash>
# Yesterday's log entries
journalctl _UID=`id -u postfix` -S yesterday -U today
# OR
journalctl -u postfix@-.service -S yesterday -U today
</code>

This does NOT work!
<code bash>
journalctl _SYSTEMD_UNIT=postfix.service
</code>

By Duration/Time
<code bash>
# Today's log entries
journalctl _UID=`id -u postfix` -S today
# Since 5 minutes ago
journalctl -u postfix@-.service --since "5 minutes ago"
# Other e.g.
journalctl -u postfix@-.service --since "1 hour ago"
journalctl -u postfix@-.service --since "2 days ago"
journalctl -u postfix@-.service --since "2023-11-12 23:15:00" --until "2023-11-12 23:20:00"
</code>

<code bash>
# Tail log entries
journalctl _UID=`id -u postfix` -f
# Tail only last 50 lines
journalctl -u postfix@-.service -n 50 --since "1 hour ago"
# In Reverse
journalctl -r -u postfix@-.service -n 50 --since "1 hour ago"
</code>

<code bash>
# Filter by priority
journalctl -r -u postfix@-.service -n 50 --since "1 hour ago" -p "emerg".."warning"
</code>
Levels are: ● 0 or “emerg”, ● 1 or “alert”, ● 2 or “crit”, ● 3 or “err”, ● 4 or “warning”, ● 5 or “notice”, ● 6 or “info”, ● 7 or “debug”

===== Clear History =====
<code bash>
# Mail log
journalctl -u postfix.service --flush --rotate --vacuum-time=1s
# All logs?
journalctl --flush --rotate --vacuum-time=1s
</code>