Here's the command it sounds like you're looking for:
`journalctl --grep="search string"`
You can limit it by time period like this:
`journalctl --since=-6h --grep="search string"`
Note that there's a separate user journal (such as for things that show up with an indication in the systray), accessible like this when in a shell as that user:
Also, if you really want, SysV still exists and works. You can setup a system with SysV and syslog-ng and have the good ol' service run system and flat log files back.
`journalctl --grep="search string"`
You can limit it by time period like this:
`journalctl --since=-6h --grep="search string"`
Note that there's a separate user journal (such as for things that show up with an indication in the systray), accessible like this when in a shell as that user:
`journalctl --user --since=-6h --grep="search string"`
Also, if you really want, SysV still exists and works. You can setup a system with SysV and syslog-ng and have the good ol' service run system and flat log files back.