> From: tomek@pipebreaker.pl
>
> On Wed, Jul 17, 2013 at 10:48:55AM -0400, John.Florian@dart.biz wrote:
> > > From: John.Florian@dart.biz
> > > With journalctl's built-in filtering
> > > capabilities I'm glad I don't have to do that anymore; it's
way more
> > > concise.
> >
> > I do wish journalctl had a -C option (like ps) to be equivalent
to _COMM=
> > much like -u equates to _SYSTEMD_UNIT. I realize if all
the fields were
> > thusly accessible it would result in option bloat quickly, but
I'd think
> > filtering on _COMM is quite routine -- it is for me at least.
>
> You can provide binary path (_EXE=) by ”journalctl /usr/sbin/sshd”.
Yes, but that's of little help with applications using
interpreted languages (e.g., python). I want to match on the name
of the python program, not python itself.
--
John Florian