From 0df5572c2a7e752efdbb86e854e2d1583e014546 Mon Sep 17 00:00:00 2001
From: Gregory Collins <greg@gregorycollins.net>
Date: Tue, 20 Jan 2015 18:39:42 -0800
Subject: [PATCH] Don't slurp unbounded amounts of data when invoking
 journalctl. Fixes #887.

---
 src/plugins/ccpp_event.conf | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/src/plugins/ccpp_event.conf b/src/plugins/ccpp_event.conf
index 9fbe760..223144e 100644
--- a/src/plugins/ccpp_event.conf
+++ b/src/plugins/ccpp_event.conf
@@ -40,9 +40,9 @@ EVENT=post-create analyzer=CCpp
             else
                 uid=`cat uid` &&
                 log="[System Logs]:\n" &&
-                log=$log`journalctl -b --system | grep -F -e "$base_executable" | tail -99` &&
+                log=$log`journalctl -b --since=-3m --system | grep -F -e "$base_executable" | tail -99` &&
                 log=$log"\n[User Logs]:\n" &&
-                log=$log`journalctl _UID="$uid" -b | grep -F -e "$base_executable" | tail -99` &&
+                log=$log`journalctl _UID="$uid" -b --since=-3m | grep -F -e "$base_executable" | tail -99` &&
                 log=`echo -e "$log"`
             fi
             if test -n "$log"; then
-- 
2.1.0