DE

↑ ↓ select, Enter open, Esc close

Show system logs since a specific time

harmless rootLogsdebian, ubuntu
Adjust the values, the command updates live
root@server
journalctl --since "1 hour ago" --no-pager

Prints all journal messages from all services starting at the given time. Relative values like 1 hour ago, today or yesterday are accepted, as well as absolute ones like 2026-10-09 14:00. --until additionally sets an end point.

Note: Without root, a user only sees their own messages, unless they are in the adm or systemd-journal group.

Also searched as

  • show logs from the last hour
  • what happened since this morning
  • journalctl since time
  • system log from specific time

Related one-liners

All in Logs

Show journal logs for a single service

#journalctl -u nginx -n 200 --no-pager
harmlessLogs

Show logs from the previous boot

#journalctl -b -1 -n 200 --no-pager
harmlessLogs

Show only error messages in the system journal

#journalctl -p err -b --no-pager
harmlessLogs

Filter the access log by time range

#awk -v von="09/Oct/2026:14:00" -v bis="09/Oct/2026:15:00" 'substr($4, 2) >= von && substr($4, 2) < bis' /var/www/vhosts/system/example.com/logs/access_ssl_log
harmlessLogs

Count IP addresses blocked by ufw

#journalctl -k --since "today" --no-pager | grep 'UFW BLOCK' | grep -o 'SRC=[^ ]*' | sort | uniq -c | sort -rn | head -20
harmlessFirewall

Detect whether the server is virtual or a container

$systemd-detect-virt
harmlessSystem and hardware

Read first, then run.

The commands on myline.de act directly on servers, files and databases. A wrong path or placeholder can delete data irreversibly or make a server unreachable.

  • All commands are provided without warranty and are not tested on every system.
  • Understand what a command does before running it, and check every placeholder.
  • Make a backup first and, if possible, try it on a test system.
  • You run commands at your own risk. Liability for damages is excluded to the extent permitted by law.