RHEL 9.0 Managing journalctl

$ sudo journalctl -p err

$ sudo journalctl --since "2022-07-01" --until "2022-07-10 15:00:00"

       -S, --since=, -U, --until=
           Start showing entries on or newer than the specified date, or on or older than the specified date, respectively.
           Date specifications should be of the format "2012-10-30 18:17:16". If the time part is omitted, "00:00:00" is
           assumed.

$ sudo journalctl _PID=1

$ sudo journalctl _UID=81

EXAMPLES
...
         _SYSTEMD_UNIT=name.service
             + UNIT=name.service _PID=1
             + OBJECT_SYSTEMD_UNIT=name.service _UID=0
             + COREDUMP_UNIT=name.service _UID=0 MESSAGE_ID=fc2e22bc6ee647b6b90729ab34a250b1
...

$ sudo cat /etc/systemd/journald.conf 
...
# See journald.conf(5) for details.

[Journal]
#Storage=auto

$ sudo man 5 journald.conf
...
       Storage=
           Controls where to store journal data. One of "volatile", "persistent", "auto" and "none". If "volatile", journal
           log data will be stored only in memory, i.e. below the /run/log/journal hierarchy (which is created if needed).
...

$ sudo systemctl restart systemd-journald.service