問題文
During an incident review, the team wants only the messages that a specific service emitted since the most recent boot, filtered to errors and worse. Which capabilities of the journal query tool address this?
選択肢
- The journal is discarded at every boot, so only the current boot exists in the store at any time.
- Filtering by priority shows only messages at exactly that severity, so each level has to be queried separately and merged afterwards.
- Filtering by unit narrows the output to that service, filtering by boot limits it to the current boot, and filtering by priority limits it to messages at or above the requested severity.
- The tool can only show the whole journal in time order, so the team has to redirect the entire output into a file and then use a text search to isolate the lines they care about.