Linux journalctl Cheat Sheet/Filter by executable

Show entries from a specific executable path.

Section: Priority, Kernel, Fields

Filter by executable

bash
bash
journalctl _EXE=/usr/sbin/sshd
Explanation

Field filters are powerful when you know journald metadata.

Learn the surrounding workflow

Compare similar commands or jump into common fixes when this command is part of a bigger troubleshooting path.

Related commands

Same sheet · prioritizing Priority, Kernel, Fields
Filter by command name
Filter by command field.
OpenIn sheetbashsame section
Priority warning and above
Show warnings, errors, and critical logs.
OpenIn sheetbashsame section
Priority range
Filter a priority range.
OpenIn sheetbashsame section
Kernel messages
Show kernel logs from the journal.
OpenIn sheetbashsame section
Kernel logs for current boot
Show current-boot kernel messages.
OpenIn sheetbashsame section
Show journal logs
Print the journal from oldest to newest by default.
OpenIn sheetbash1 tag match