Skip to content

Instantly share code, notes, and snippets.

What would you like to do?
journalctl doesn't have an --exclude switch, so let's make out own
exec 0</dev/null
exec 2>&1
exec journalctl --utc --lines=2048 --follow > \
>(exec stdbuf --output=L awk '$5 !~ "^(kernel|audit|CROND|crond)" {print}' > \
>(exec stdbuf --output=L ccze --raw-ansi --plugin syslog --options nolookups))
exit 127
# eof
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment