Unix and Linux Stack Exchange
Unix and Linux Stack Exchange

Questions tagged [systemd-journald]

For questions pertaining to systemd-journald, a system service that collects and stores logging data. Use this tag for questions about systemd-journald itself, using systemd-journald, or questions about issues arising from collecting and storing logging data in systems where this task is performed by systemd-journald.

The systemd journal deamon, a system service that collects and stores logging data, allowing administrators to read detailed information from the journal while monitoring service status using the status command.

Official documentation: systemd-journald.

290 questions
27
votes
3 answers

How to get the current systemd-journald running configuration?

I'd like to get the current configuration of journald, similarly to question How to view systemd's runtime global config? How can I do this? Specifically, I have set some of the available parameters for log rotation but journald seems to obey other…
Christophe Drevet
  • 4,157
8
votes
0 answers

Why do "journalctl --disk-usage" and "journalctl | wc" not correspond well?

TL;DR how comes that journald stores about 770 MiB while displaying the logs only yields 90MiB of data? #UPDATE# I did a journalctl -a -o verbose which at least yielded some 530MiB, yet less than the 770MiB the journal uses on disk. Anyway I would…
humanityANDpeace
  • 14,392
5
votes
1 answer

How do you enforce log expiration with journald?

Suppose I only wanted to keep logs for the last 10 days. Would I have to run journalctl --vacuum-time=10d on a timer every day? Do I need to also use --rotate? What does "rotate journal files" mean? Could I set something in…
425nesp
  • 446
4
votes
0 answers

systemd-journald: Missed 685 kernel messages

At boot and some other times I see missed kernel logs on my system. After that I set Rate limits at jornald.conf but no luck. I still have the issue. Do you have any advice? Kernel: 4.14.19-1-lts ARCH-Linux My jornald…
Ozbit
  • 429
3
votes
0 answers

Filter logs with journald

A monitoring service that executes every minute requires sudo. With this my logs are full of pam_unix entries, telling me that this service logged in with sudo. Now that I have journald on this machine, I thought maybe I could filter those logs, so…
Ethan Leroy
  • 161
2
votes
1 answer

Force journald to keep logs for 30 days

I am using journalctl for logging, it appears to be only keeping logs for 1 hour, how can I force it to keep 30 days of logs?
guesty
  • 169
2
votes
1 answer

Configure systemd journald to both forward and store in persistent journal?

With systemd some things changed. So instead of tailing a specific file, I could now use journalctl to access the journal. However, in /etc/systemd/journald.conf under [Journal] the option Storage=persistent seems to conflict with…
0xC0000022L
  • 16,593
1
vote
0 answers

systemd-journal-remote claims that the logfile is corrupt

I am trying to upload my journald logs from a server to a centralized server. I am using systemd-journal-remote and systemd-journal-upload for this. The initial sync of existing logs goes perfectly. After a while, when uploading new logs,…
user455443
  • 11
  • 2
1
vote
0 answers

How to change the location of systemd-journald log files?

Background: An embedded Linux device has a very small main disk size (less then 2GB), and a larger external flash memory (SATA disk of size 64GB). Issue: Some of the applications run by systemd (and logged by journald) produce very large log…
Lhh92
  • 51
1
vote
1 answer

change the name of the journal files in /var/log/journal/remote coming from /var/log/journal/upload

I have several hosts using systemd-journal-upload to send their logs to my systemd-journal-remote server. The name of the files in /var/log/journal/remote are remote-[IP_ADDR].journal but I'd like them to be remote-[HOSTNAME].journal. How do I…
StackShin
  • 11
  • 2
1
vote
2 answers

Log all scp transfers with systemd-journald

Does systemd-jurnald log incoming scp connections and what file they copied to what place? I would either like to access these logs or change the config so all of these file transfers are logged.
tobias47n9e
  • 63
1
vote
1 answer

Safe to clear files in /run/log/journal CentOS 7.4

There a log entries on my CentOS 7.4 server in /run/log/journal/ that are up to 1.3GB. IS it safe to clear the older files out? [root@fbds journal]# pwd /run/log/journal [root@fbds journal]# ll total 0 drwxr-s---+ 2 root systemd-journal 300 Feb 7…
mav1c
  • 11
1
vote
0 answers

Can systemd-journald use network to transmit?

I use systemd-journald and forwards the log messages to rsyslog on my centos host , and then use rsyslog transmit on network . So, Can systemd-journald transmit log message use network?
穆阿浩
  • 401
  • 2
  • 10
  • 19
0
votes
0 answers

finding more information on journald failure

System locked up with console full of systemd-journald[123]: Failed to write entry to /var/log/journal/b5...1c/user-100.journal (29 items, 820 bytes) despite vacuuming, ignoring: input/output error (Dropped 798 similar messages)" After a reset I…
gcb
  • 398
0
votes
1 answer

Journal: which services are filling up the allowed journal-size?

On a Debian machine, by default the systemd-journal is caring about the logs. It's configuration limits the max disk space it can use: $ cat /etc/systemd/journald.conf SystemMaxUse=100M SystemKeepFree=200M Now its directory is filled up to around…
Daniel
  • 339
1
2