2

I've noticed, on machines where the journalctl logs are saved on disk, that on a reboot, I get a line between the message before and after the reboot happened like so:

blah
blah
blah
-- Reboot --
blah
blah
blah

How does journalctl know to add that line at that location?

1 Answer 1

5

journalctl keeps track of the boot_id attached to logs, and when that changes, indicates that the system rebooted.

The boot_id is generated by the kernel, and can be retrieved from /proc/sys/kernel/random/boot_id.

0

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .