Query

Query journal log entries on a target host:

$ osapi client node log query --target web-01

  Job ID: 550e8400-e29b-41d4-a716-446655440000

  HOSTNAME  STATUS  TIMESTAMP                  UNIT           MESSAGE
  web-01    ok      2026-01-01T00:00:01+00:00  sshd.service   Accepted publickey for ...
  web-01    ok      2026-01-01T00:00:02+00:00  kernel         Linux version 6.1.0 ...
  web-01    ok      2026-01-01T00:00:03+00:00  nginx.service  connect() failed (111...

  1 host: 1 ok

Filter by priority and time window:

$ osapi client node log query --target web-01 \
  --lines 50 --since 1h --priority err

  Job ID: 550e8400-e29b-41d4-a716-446655440000

  HOSTNAME  STATUS  TIMESTAMP                  UNIT           MESSAGE
  web-01    ok      2026-01-01T00:59:01+00:00  nginx.service  connect() failed (111...

  1 host: 1 ok

When targeting all hosts:

$ osapi client node log query --target _all --lines 5

  Job ID: 550e8400-e29b-41d4-a716-446655440000

  HOSTNAME  STATUS  TIMESTAMP                  UNIT           MESSAGE
  web-01    ok      2026-01-01T00:00:01+00:00  sshd.service   Accepted publickey for ...
  web-02    ok      2026-01-01T00:00:02+00:00  kernel         Linux version 6.1.0 ...

  2 hosts: 2 ok

When some hosts are skipped:

$ osapi client node log query --target _all --lines 5

  Job ID: 550e8400-e29b-41d4-a716-446655440000

  HOSTNAME  STATUS  TIMESTAMP                  UNIT           MESSAGE
  web-01    ok      2026-01-01T00:00:01+00:00  sshd.service   Accepted publickey for ...
  mac-01    skip

  2 hosts: 1 ok, 1 skipped

  Details:
  mac-01    unsupported platform

JSON Output

Use --json to get the full API response:

$ osapi client node log query --target web-01 --lines 1 --json
{"results":[{"hostname":"web-01","status":"ok","entries":[{"timestamp":
"2026-01-01T00:00:01+00:00","unit":"sshd.service","priority":"info",
"message":"Accepted publickey for user from 1.2.3.4 port 22 ssh2",
"pid":1234,"hostname":"web-01"}]}],"job_id":"..."}

Flags

Flag	Description	Default
-T, --target	Target: _any, _all, hostname, or label (group:web)	_any
--lines	Maximum number of log lines to return	100
--since	Return entries since this time (e.g., 1h,
	2026-01-01 00:00:00)
--priority	Filter by priority level (e.g., err, warning,
	info)
-j, --json	Output raw JSON response