#!/bin/sh
# Forced command for the logpull key (see DEPLOY.md): prints journal entries since the last pull,
# one JSON object per line. The cursor file records where the previous pull stopped, so each run
# returns only what is new; if a pull breaks off, the next one repeats it rather than losing it.
exec journalctl --cursor-file=/var/lib/logpull/cursor --output=json --no-pager \
  --output-fields=MESSAGE,PRIORITY,SYSLOG_IDENTIFIER,_PID,_COMM,_SYSTEMD_UNIT,_UID,_TRANSPORT