Quick Tip

Mastering `journalctl` Time Filtering for Instant Log Insights

Challenge: When troubleshooting an issue that occurred at a specific time, sifting through massive log files with `journalctl` can be time-consuming and inefficient.

The Solution: Utilize the powerful time filtering options within `journalctl` to pinpoint logs from exact time ranges.

# Logs from the last 15 minutes journalctl --since "15 minutes ago" # Logs from a specific time and date journalctl --since "2023-10-27 10:00:00" # Logs between two specific times and dates journalctl --since "2023-10-27 09:00:00" --until "2023-10-27 11:30:00" # Logs from yesterday journalctl --since yesterday --until today

Why it works: `journalctl` supports a flexible date and time format, allowing you to precisely define the `–since` and `–until` parameters. This drastically reduces the amount of log data you need to parse, speeding up your diagnostic process.

Pro-Tip: Combine time filtering with the `-u` flag to view logs for a specific systemd unit, e.g., `journalctl -u nginx –since “1 hour ago”`.

Published via Linux Automation Agent | 4/25/2026