Server Fault
Server Fault

Questions tagged [journald]

119 questions
62
votes
2 answers

How do view older journalctl logs (after a rotation maybe?)

I am running docker on ubuntu 16.04 and would like to view the logs. However, I am unable to view logs after what I am guessing is some sort of rotation or the logs grow to a certain size. I have not made any changes to my journald.conf, so I am…
jdf
  • 1,061
58
votes
6 answers

How do you use systemd's journalctl patterns

I am trying to use journalctl's pattern matching on SYSLOG_IDENTIFIERS. As an example, I have a ton of message tagged sshd: $ journalctl -t sshd | wc -l 987 but if I try to use pattern matching to find them: $ journalctl -t 'ssh*' -- No Entries…
Mark Grimes
  • 814
34
votes
1 answer

How to configure systemd journal-remote?

How to configure systemd journal-remote to listen on specific port? All I can find are command line examples. And base on man page, there don't seems to be any option in journal-remote.conf.
John Siu
  • 3,787
  • 2
  • 19
  • 24
20
votes
2 answers

journalctl access for non-root users

The journald documentation says that adding a user to 'systemd-journal' group or 'adm' group allows the user to access system-wide journal. I'm running the latest CentOS 7 and I seem to have problem accessing the journal as a non-root user. Here's…
mike
  • 261
18
votes
3 answers

Is rsyslog redundant on when using journald?

I have noticed log messages are duplicated in journald and /var/log/messages on my CentOS 7 system. At first I thought it was the journald option ForwardToSyslog (which defaults to 'yes' in the installed version) which caused this behavior, but…
joaerl
  • 477
18
votes
2 answers

How to display syslog priority level in systemd's journalctl

journalctl allows me to filter on priority (-p) and color-codes the priority in the output. But is there any way to get it to output the priority directly, as text?
Avi Kivity
  • 283
17
votes
1 answer

Getting journald logs to a plain text file

I want to log journald logs to a file so I can later on fetch it and send it to Logstash. I thought about running syslog-ng and make it a client of journald, so I'd get syslog files. I'm using Docker containers on a CoreOS machine, so I tried to run…
Jose Armesto
  • 271
12
votes
3 answers

Why are journald logfiles so huge?

When I do a journalctl --disk-usage it says something about 300MB size of the journal files but when I look at the actual text with journalctl | wc -c it's something about 28MB. Well, journald has compression and even considering the metadata like…
Smith_33
  • 123
11
votes
2 answers

journalctl - stop following without exiting pager

If I do: journalctl -u my-service then a Shift-F to follow while paging, how do I (interrupt to abort) without exiting the pager? With less, I typically just ^C, but if I do that in journalctl, it exits the entire pager.
MikeKusold
  • 231
10
votes
1 answer

How to filter journalctl output by process name?

When a process logs to systemd, its process name is recorded and displayed as identifier in the journalctl output. $ systemd-cat echo "test" $ journalctl -f -- Logs begin at Sat 2018-02-24 12:13:24 CET. -- ... Jul 25 13:52:26 mycomputer echo[25098]:…
Merlijn Sebrechts
  • 468
10
votes
1 answer

How do I specify a fail2ban filter/jail where the log is sourced from systemd/journald?

I've got nginx running and logging to systemd / journald. How do I specify the source of the log to be from a systemd unit? In man jail.conf I see for the backends listed as : systemd uses systemd python library to access the…
Chris Stryczynski
  • 2,138
  • 3
  • 24
  • 30
7
votes
0 answers

journald memory usage on CentOS 7

I have an AWS EC2 instance running a CentOS 7.7.1908 (systemd 219) with a server application. The server logs quite a lot of information to the system logs (using syslog). I have recently enabled persistent storage of the system logs using this…
MikaDo-
  • 71
  • 1
  • 3
7
votes
3 answers

systemd-journald Doesn't start at all

After deleting my /var/log/journal by accident, I am unable to recover from the consequences. systemd-journald keeps failing over and over again every time I try to start it. when I run: $ journalctl --verify PASS:…
lyoko the
  • 251
7
votes
1 answer

systemd-journald fails to start on CentOS 7

Since a week ago, journald doesn't finish starting anymore. When booting up, it starts up and logs the boot messages and a few other service startup logs, and then abruptly shuts down when starting Switch Root: Mar 18 05:22:56 playground1.local…
Sergiu Dumitriu
  • 693
7
votes
1 answer

How can I output logs to a file from the content of a service with systemd

Well, I have a service configured with systemctl. This is the config file: [Unit] Description=The description of the service (: After=network.target [Service] ExecStartPre=/bin/echo 'Starting Service' >>…
robe007
  • 223
1
2 3 4 5 6 7 8