Journald

journalctl

journalctl | grep -i sshd

journalctl --since yesterday

journalctl --since "2024-01-01 00:00:00" --until "2024-01-02 00:00:00"

Cleanup

journalctl --disk-usage

sudo journalctl --vacuum-size=1G