Skip to main content
Glama
crunchtools

io.github.crunchtools/systemd

by crunchtools

Journal Query Tool

journal_query_tool
Read-only

Query systemd journal logs by unit, time range, priority, boot, or regex pattern to troubleshoot service issues and inspect system events.

Instructions

Query the journal — the main 2AM troubleshooting tool.

Input Schema

NameRequiredDescriptionDefault
bootNoBoot offset (0 = current boot, -1 = previous boot, ...)
unitNoRestrict to one unit (omit for the whole system journal)
linesNoNumber of log lines to return (default: 100)
sinceNoShow entries since this time (e.g. "1 hour ago", "YYYY-MM-DD HH:MM:SS")
untilNoShow entries until this time
patternNoFilter messages by regex pattern (journalctl -g)
priorityNoMinimum priority: emerg/alert/crit/err/warning/notice/info/debug or 0-7

Output Schema

NameRequiredDescriptionDefault

No arguments

Schema Changelog

Changes observed during successful MCP inspections.

  1. Changed1 schema field changed
    • changedInput schema / properties / since / description
      Previous value: -"Show entries since this time (e.g. \"1 hour ago\", \"2026-09-19 02:00\")"New value: +"Show entries since this time (e.g. \"1 hour ago\", \"YYYY-MM-DD HH:MM:SS\")"
  2. First observedv0.1.0

TDQS

B3.2/5.0
Behavior2/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

The readOnlyHint annotation already tells the agent this is a safe read operation. The description adds only a vague troubleshooting label and no behavioral context such as scope, pagination, limits, or what kind of journal is queried. It does not contradict annotations, but it adds little beyond them.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is a single front-loaded sentence with little waste. The '2AM troubleshooting' phrase adds slight color but still supports the troubleshooting context; the main issue is terseness, not verbosity.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness3/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

The fully described schema and the existence of an output schema mean an agent can invoke the tool without more description. However, the description does not clarify the journal scope or how this diagnostic tool relates to the many sibling unit and system tools, leaving the context thin.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100%, so all seven parameters are already documented in the input schema. The description adds no parameter semantics beyond what the schema provides, which makes the baseline score of 3 appropriate.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description states a specific verb and resource: 'Query the journal.' The phrase 'main 2AM troubleshooting tool' hints at its use case, but it does not explicitly distinguish this tool from sibling diagnostic tools like unit_status_tool or system_status_tool.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines3/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description implies the tool is used for troubleshooting via '2AM troubleshooting tool,' but it gives no explicit when-to-use, when-not-to-use, or alternative-tool guidance. The agent must infer when journal querying is preferable to checking unit status or system status.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.