ssh_service_status
Read-only
Report a systemd unit's loaded, active, and enabled state, plus journal tail, with fallbacks for non-systemd systems and permission-limited access.
Instructions
Reports one systemd unit: whether it is loaded, active and enabled, with the tail of its journal. A machine without systemd comes back as NOT CHECKED, never as a stopped service — that would read as an outage which is not there. Without sudo the journal is trimmed to what the profile user may see. For every failed unit at once, ssh_audit_baseline names them.
Input Schema
TableJSON Schema
| Name | Required | Description | Default |
|---|---|---|---|
| sudo | No | Read as root. Straight away for places a plain user cannot read (/root, /var/lib/docker); otherwise retry with true when the answer names what it could not read. Default: false Without it the journal comes back trimmed to what the profile user may see. | |
| unit | Yes | Unit name, e.g. "nginx" or "nginx.service". | |
| since | No | Journal window, as journalctl reads it: "1h ago", "today", "2026-08-19". | |
| profile | Yes | Machine name. | |
| log_lines | No | Journal lines returned. Default: 50 |
Output Schema
TableJSON Schema
| Name | Required | Description | Default |
|---|---|---|---|
| unit | No | ||
| enabled | No | ||
| outcome | No | ||
| restart | No | ||
| sub_state | No | ||
| recent_log | No | ||
| status_head | No | ||
| active_state | No | ||
| restart_after | No |