diff --git a/linux/journalctl.md b/linux/journalctl.md
new file mode 100644
index 0000000000..f3c22a292b
--- /dev/null
+++ b/linux/journalctl.md
@@ -0,0 +1,27 @@
+# journalctl
+
+> Query the systemd journal
+
+- Show all messages from this boot
+
+`journalctl -b`
+
+- Show all messages from last boot
+
+`journalctl -b -1`
+
+- Follow new messages (like `tail -f` for traditional syslog)
+
+`journalctl -f`
+
+- Show all messages by a specific unit
+
+`journalctl -u {{unit}}`
+
+- Show all messages by a specific process
+
+`journalctl _PID={{pid}}`
+
+- Show all messages by a specific executable
+
+`journalctl {{/path/to/executable}}`