Linux Commands / IT Support Guides
Filter systemd logs to an incident window
A short failure window is easier to investigate than the entire system journal. Filter by unit and relative time to focus on one service.
Environment and inputs: Linux · Bash-compatible shell; package and service names vary by distribution
Try the diagnostic command
Use the stated shell and platform. Replace sample domains, addresses, services and paths with values from the system you are authorized to support.
journalctl -u nginx --since '30 minutes ago' --no-pagerHow to read the result
The command shows accessible journal records for the selected unit in the recent window. Missing older records may reflect rotation, volatile storage or access restrictions.
What to do next
Match the first error with the request time and service state. If the incident was earlier, use an explicit time range and record the server's timezone.
Before you make a change
Substitute the correct unit. Journal messages may contain private request data; sanitize the excerpt before adding it to a shared ticket.