query_journalctl
Filter and retrieve specific journal logs by service, time, priority, or regex without dumping the entire journal.
Instructions
Filtered journal query — never dump the whole journal.
Args: service: unit to filter (empty = all). since: e.g. '10 min ago', 'today', '2026-06-10'. priority: e.g. 'err' to show err..emerg only. lines: max lines (1–300). grep_pattern: extra regex filter applied to the result. scope: 'system' or 'user'. kernel: kernel ring messages (journalctl -k).
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| service | No | ||
| since | No | 1 hour ago | |
| priority | No | ||
| lines | No | ||
| grep_pattern | No | ||
| scope | No | system | |
| kernel | No |
Output Schema
| Name | Required | Description | Default |
|---|---|---|---|
No arguments | |||