- `journalctl` to view systemd journal (log)
- `/var/log/journal` stores `journalctl` logs`sudo journalctl` for systemd logs ![[images/Pasted image 20250803141316.png]]
- -f to follow in real time
- -k for only kernel messages
- -r for reverse chronological order
- -b for current boot entries
- -u service_name for service specific logs