Quick Tip

Taming `journalctl`: Pinpointing Logs by Time Range

Challenge: When troubleshooting, you often need to examine log entries within a specific time frame, but scrolling through `journalctl` output can be tedious.

The Solution: Use the `–since` and `–until` flags with `journalctl` to filter logs by date and time.

journalctl --since "YYYY-MM-DD HH:MM:SS" --until "YYYY-MM-DD HH:MM:SS"

Why it works: These flags instruct `journalctl` to only display messages that fall between the specified start and end timestamps, significantly narrowing down the relevant log entries.

Pro-Tip: You can use relative times like “yesterday”, “1 hour ago”, or “now” for even quicker filtering.

Linux Tips & Tricks | © ngelinux.com | 4/29/2026