Skip to content

Commit c2e600f

Browse files
committed
docs: add -J/-j JSON output flags to man page
1 parent f622651 commit c2e600f

File tree

1 file changed

+41
-0
lines changed

1 file changed

+41
-0
lines changed

Lsof.8

Lines changed: 41 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -900,6 +900,47 @@ When specified without a PGID set that's all it does.
900900
.B \-H
901901
directs lsof to print human readable sizes, e.g. 123.4K 456.7M.
902902
.TP \w'names'u+4
903+
.B \-J
904+
selects JSON output mode. Instead of the traditional tabular or
905+
.B \-F
906+
field output, lsof produces a single JSON object on stdout containing
907+
a
908+
.B "processes"
909+
array. Each process object contains its fields and a
910+
.B "files"
911+
array of open file entries.
912+
.IP
913+
Field selection follows the same rules as
914+
.BR \-F :
915+
use
916+
.B \-F
917+
with field characters to select which fields appear in the JSON output.
918+
Without
919+
.BR \-F ,
920+
the default field set is used.
921+
.IP
922+
.B \-J
923+
is mutually exclusive with
924+
.B \-j
925+
and
926+
.BR \-t .
927+
Warnings and errors are sent to stderr; stdout is always valid JSON.
928+
.TP \w'names'u+4
929+
.B \-j
930+
selects JSON Lines output mode. Each open file produces one JSON
931+
object per line, combining process and file fields in a single
932+
denormalized record. This format is suitable for streaming pipelines,
933+
log ingestion (Splunk, Datadog, Elastic), and line\-oriented tools.
934+
.IP
935+
Field selection follows the same rules as
936+
.BR \-J .
937+
.IP
938+
.B \-j
939+
is mutually exclusive with
940+
.B \-J
941+
and
942+
.BR \-t .
943+
.TP \w'names'u+4
903944
.BI \-i " [i]"
904945
selects the listing of files any of whose Internet address
905946
matches the address specified in \fIi\fP.

0 commit comments

Comments
 (0)