Linux+ V8 journalctl Log Analysis Quiz

1. What command shows logs for a specific PID?

Journalctl _PID=1234

Journalctl --pid=1234

Journalctl -p 1234

Both a and b

2. Which command rotates and truncates journal files?

Journalctl --rotate

Journalctl --vacuum-time=30d

Journalctl --flush

Both a and b

3. True or False: You can use grep with journalctl to filter output.

True

False

4. What does the -x flag add to journalctl output?

Catalog explanations for messages

Extended JSON format

Hexadecimal timestamps

XML-formatted output

5. Which command shows logs for a specific systemd unit?

Journalctl -u nginx.service

Journalctl --unit=apache2

Journalctl -s nginx

Both a and b

6. How do you limit journalctl output to the last hour?

Journalctl --since 1 hour ago

Journalctl -S '1 hour ago'

Journalctl --last-hour

Both a and b

7. What command verifies the integrity of journal files?

Journalctl --verify

Journalctl -v

Journalctl --check

Journalctl -c

8. True or False: journalctl automatically stores logs persistently across reboots.

True

False

9. Which file stores persistent journalctl logs by default?

/var/log/journal

/var/log/messages

/etc/journal

/tmp/journal

10. How do you display the journal size and disk usage?

Journalctl --disk-usage

Journalctl -du

Journalctl --size

Journalctl -s

11. What is the primary purpose of journalctl in Linux systems?

To manage user file permissions

To query and display systemd journal logs

To configure network interfaces

To install software packages

12. Which output format displays logs as JSON objects?

Journalctl -o json

Journalctl --output=json

Journalctl -j

Both a and b

13. How do you view logs from a specific time range?

Journalctl --since and --until

Journalctl -S and -U

Journalctl -t and -T

Journalctl -start and -end

14. What does the -f flag do in journalctl?

Filters by facility

Follows log output in real-time

Forces log rotation

Formats output as JSON

15. Which priority level is highest in systemd journal severity?

Warning

Critical

Emerg

Alert

16. How do you display logs in reverse chronological order (newest first)?

Journalctl -r

Journalctl --reverse

Journalctl -n

Both a and b

17. Which command shows logs since the last system boot?

Journalctl -b

Journalctl --boot

Journalctl -S today

Both a and b

18. What does the -u flag do in journalctl?

Filters logs by unit (service)

Updates the journal database

Displays logs in UTC timezone

Uncompresses archived logs

19. How do you filter journalctl output to show only ERROR priority messages?

Journalctl -p error

Journalctl --priority=ERROR

Journalctl -e error

Both a and b

20. Which journalctl command displays the most recent 50 log entries?

Journalctl -n 50

Journalctl --lines=50

Journalctl -l 50

Both a and b

Linux+ V8 Log Analysis with journalctl Quiz

1. What command shows logs for a specific PID?

2.

What first name or nickname would you like us to use?

2. Which command rotates and truncates journal files?

3. True or False: You can use grep with journalctl to filter output.

4. What does the -x flag add to journalctl output?

5. Which command shows logs for a specific systemd unit?

6. How do you limit journalctl output to the last hour?

7. What command verifies the integrity of journal files?

8. True or False: journalctl automatically stores logs persistently across reboots.

9. Which file stores persistent journalctl logs by default?

10. How do you display the journal size and disk usage?

11. What is the primary purpose of journalctl in Linux systems?

12. Which output format displays logs as JSON objects?

13. How do you view logs from a specific time range?

14. What does the -f flag do in journalctl?

15. Which priority level is highest in systemd journal severity?

16. How do you display logs in reverse chronological order (newest first)?

17. Which command shows logs since the last system boot?

18. What does the -u flag do in journalctl?

19. How do you filter journalctl output to show only ERROR priority messages?

20. Which journalctl command displays the most recent 50 log entries?