Initial unit tests

this looks more like expect_command as it is not journalctl specific