← All commands
Topic hub Services & Processes
Windows Linux Services & Processes Services

Windows eventvwr / Event Viewer equivalent in Linux

Reads logs from the systemd journal — the Linux equivalent of Windows Event Viewer.

Windows eventvwr / Event Viewer
Linux equivalents
Debian/Ubuntu apt + systemd
journalctl
Fedora dnf + systemd
journalctl
Arch pacman + systemd
journalctl

Overview

What this command does

Reads logs from the systemd journal — the Linux equivalent of Windows Event Viewer.

Migration tip: journalctl -f follows the log in real-time like tail -f. Use -u servicename to filter logs for just one service.

Practical tasks

Common use cases

View system logs

Reads logs from the systemd journal — the Linux equivalent of Windows Event Viewer.

journalctl -f

Follow live log output (like tail -f)

journalctl -u nginx

Logs for a specific service

journalctl -b

Logs since last boot

Ready to run

Copyable Linux commands

Review paths, device names, package names and permissions before running any command.

journalctl -f
journalctl -u ssh
journalctl -b -p err
journalctl --since "2024-01-15"

Walkthrough

Examples with explanations

# Windows: eventvwr  (GUI only)
journalctl -f                      # follow live system log
journalctl -u ssh                 # SSH service logs only
journalctl -b -p err             # errors since last boot
journalctl --since "2024-01-15"  # logs from a specific date

Reference

Common options and variations

Command or optionUse
journalctl -fFollow live log output (like tail -f)
journalctl -u nginxLogs for a specific service
journalctl -bLogs since last boot
journalctl --since '1 hour ago'Logs from last hour
journalctl -p errShow only errors
journalctl -n 50Show last 50 log entries

Distro differences

Debian/Ubuntu vs Fedora vs Arch

systemd commands are mostly distribution-neutral, but package names and service unit names can differ.

DistributionPackage manager / baseEquivalent commandDifference to notice
Debian/Ubuntu apt + systemd journalctl Same systemctl/journalctl syntax on systemd-based Debian and Ubuntu systems.
Fedora dnf + systemd journalctl Same command syntax; service names can differ by package.
Arch pacman + systemd journalctl Same command syntax; enable services explicitly after package installation.

Keep learning

Related Services & Processes commands