Journald

Journald (`journald`)

Read events from systemd-journald (Linux-only).

Linux json

input:
  journald: {}

JSON

{
  "input": {
    "journald": {}
  }
}

Field	Type	Description
`matches` Filtering	`string[]`	Optional match filters in `FIELD=VALUE` form (systemd journal native syntax).
`units` Filtering	`string[]`	Optional systemd unit names to constrain journal reads.
`priorities` Filtering	`Priorities[]`	Optional priority filters (emerg
`start-at-oldest` Behaviour	`boolean` (`bool`)	Start reading from the oldest available entry (clears any saved cursor).
`follow-boot` Behaviour	`boolean` (`bool`)	Continue reading past boot boundaries (ignore saved cursors from previous boots).
`debug-entry-payloads` Debugging	`boolean` (`bool`)	Emit the raw journald entry payload alongside the parsed fields (verbose).

Show fields

Field	Type	Description
`matches`	`string[]`	Optional match filters in `FIELD=VALUE` form (systemd journal native syntax).
`units`	`string[]`	Optional systemd unit names to constrain journal reads.
`priorities`	`Priorities[]`	Optional priority filters (emerg

Show fields

Field	Type	Required	Description
`start-at-oldest`	`boolean` (`bool`)		Start reading from the oldest available entry (clears any saved cursor).
`follow-boot`	`boolean` (`bool`)		Continue reading past boot boundaries (ignore saved cursors from previous boots).

Show fields

Field	Type	Required	Description
`debug-entry-payloads`	`boolean` (`bool`)		Emit the raw journald entry payload alongside the parsed fields (verbose).