Path: csiph.com!fu-berlin.de!uni-berlin.de!individual.net!not-for-mail From: "Carlos E.R." Newsgroups: comp.os.linux.misc Subject: Re: ever had 1GB+ kern.log (and syslog) from changing monitors? Date: Tue, 20 Jan 2026 14:04:04 +0100 Lines: 32 Message-ID: <43b44mx0bu.ln2@Telcontar.valinor> References: <10kceac$1b9bd$1@dont-email.me> <10ke93r$2091b$6@dont-email.me> <10kebal$218ao$3@dont-email.me> <10kgrol$2rc7o$4@dont-email.me> <10kibq0$23nl9$1@news1.tnib.de> <10kjht7$3p7to$4@dont-email.me> <10kkrjr$2dshr$1@news1.tnib.de> <10klgh6$2ggek$1@news1.tnib.de> <9bl24mx42m.ln2@Telcontar.valinor> Mime-Version: 1.0 Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: 8bit X-Trace: individual.net Ue2gzTgm4tixaunbHvaZ3AeuJY9XS5jpOlrfndDJ6NQoB6FBOy X-Orig-Path: Telcontar.valinor!not-for-mail Cancel-Lock: sha1:+IpJ4Wr/Bsjey/oYo7uEyT385js= sha256:TcYxHmt1aNjaJaA4hBlo2pNp0VMuLBDYRyw7bs21odY= User-Agent: Mozilla Thunderbird Content-Language: es-ES, en-CA In-Reply-To: X-Leafnode-NNTP-Posting-Host: 127.0.0.1 Xref: csiph.com comp.os.linux.misc:81344 On 2026-01-20 09:37, Richard Kettlewell wrote: > "Carlos E.R." writes: >> On 2026-01-20 00:05, Richard Kettlewell wrote: >>> Not 100% clear what you’re asking but wouldn’t journalctl --unit= >>> with the unit(s) you care about be sufficient? >> >> No. I have to provide all units for a report. I remove those that are >> private or irrelevant, like news. > > Right, so all units except the ones you don’t care about. Same thing, > just phrased differently. Using units is impossible. cer@Telcontar:~> journalctl --field=_SYSTEMD_UNIT | wc -l 5433 cer@Telcontar:~> Imagine the command line listing all those five thousand units. We tried several concoctions, and the command that worked best was this: journalctl --boot=-2 --facility=kern,user,daemon,auth,syslog,lpr,uucp,cron,authpriv,ftp,12,13,14,15,local0,local1,local2,local3,local4,local5,local6,local7 > journal_purged Not units, but facilities. Problem is, there is no command to say "all except...", instead you have to explicitly list all of them except those you do not want to include. And then there is another problem, that some entries do not have a facility assigned, it got lost somewhere. They do have a facility when seen on syslog. It is a systemd bug. -- Cheers, Carlos. ES🇪🇸, EU🇪🇺;