On Wed, Jul 24, 2019 at 4:08 PM Zbigniew Jędrzejewski-Szmek <zbys...@in.waw.pl> wrote: > you can export and write to a journal file with: > journalctl -o export ... | /usr/lib/systemd/systemd-journal-remote -o > /tmp/foo.journal - > This has the advantage that you can apply any journalctl filter where > the dots are, e.g. '-b'.
This doesn't look to work correctly: $ journalctl -b | head -- Logs begin at Thu 2017-04-13 14:05:51 CEST, end at Thu 2019-08-01 08:51:39 CEST. -- Mar 25 06:51:35 crapovo kernel: microcode: microcode updated early to revision 0x25, date = 2018-04-02 $ journalctl -o export -b | /usr/lib/systemd/systemd-journal-remote -o /tmp/foo.journal - $ journalctl -b --file=/tmp/foo.journal | head -- Logs begin at Sat 2019-06-22 18:32:31 CEST, end at Thu 2019-08-01 08:45:45 CEST. -- Jun 22 18:32:31 crapovo polkitd[1278]: Unregistered Authentication Agent for unix-process:7300:772806437 (system bus name :1.4562, object path /org/freedesktop/PolicyKit1/AuthenticationAgent, locale en_US.UTF-8) (disconnected from bus) As you can see, the start is not the same. Also are foo.journal data compressed ? Thank you. -- Francis _______________________________________________ systemd-devel mailing list systemd-devel@lists.freedesktop.org https://lists.freedesktop.org/mailman/listinfo/systemd-devel
