Quick Tip

Tame `journalctl`: Pinpoint Logs with Time Ranges

Challenge: Sifting through massive log files with journalctl to find entries within a specific timeframe can be tedious and inefficient. You need a quick way to zero in on logs from a particular hour, day, or even a custom duration.

The Solution: Use the --since and --until options with journalctl to define your time window.

journalctl --since "YYYY-MM-DD HH:MM:SS" --until "YYYY-MM-DD HH:MM:SS"

Why it works: These flags allow you to specify precise start and end datetimes, filtering the log output to only show entries that fall within that interval. You can also use relative times like “yesterday”, “1 hour ago”, or “2 days ago”.

Pro-Tip: Combine these with other journalctl filters (like -u service_name) to further narrow down your search.

Linux Tips & Tricks | © ngelinux.com | 5/1/2026