Matching only the err priority | LinuC Level 1 102 Exam original practice question

1.09.2Basic

Select exact err messages from every facility, excluding crit, alert, and emerg.

Which selector is appropriate?

Hint 1: Focus on journal storage

Separate persistent storage, runtime-only storage, automatic selection, and disabled storage behavior.

Hint 2: Key terms

Review the short definitions of journal storage, persistence, rotation, and runtime behavior involved.

*.=err: The selector form that matches only priority err for every facility.
=: The operator that requests an exact syslog priority match.
*.err: The selector form that includes err and more severe priorities.
none: A selector value that excludes matching messages from an action.
err: The syslog priority representing an error condition.
err.=*: A selector spelling with a different field order and operator placement.

Detailed explanation

Incorrect*.err

Incorrect. *.err also includes more severe priorities.

Incorrect*.!err

Incorrect. *.!err excludes err.

Correct*.=err

Correct. *.=err matches only err.

Incorrecterr.=*

Incorrect. It reverses facility and priority syntax.

An example you can run in a temporary verification environment.

printf '%s
' '*.=err' | awk -F. '{print $2}'

=err

Foundation review

Metadata that classifies a message source and its severity.

Whether systemd journal data survives a reboot and where it is stored.

A process that retains, renames, compresses, or removes log generations.

Question IDKL-102-1087

EnvironmentPOSIX awk / 模擬selectorのみ

Last technical review2026-08-13

More practice in this area