Questions tagged [journalctl]
Questions about journalctl - the tool used to manage, query and view logs on systemd setups.
148
questions
0
votes
1
answer
15
views
How to check running output for a process which is not being explicitly logged?
One of our machines is running geth ( ethereum blockchain client )
ideally, to check the program output, we will have something like this;
geth --datadir ./myDataDir --networkid 1114 console 2>> ...
- 103
0
votes
0
answers
29
views
Enable journalctl within Ubuntu container
I've got an Ubuntu 22.04 container running on a MacOS host. Inside the container, I'm fiddling with routing and would like to add some -j LOG rules to iptables to see where my packets are going. ...
- 707
0
votes
1
answer
63
views
Is there any way to enable ansi colors in journalctl logs?
foo.py prints ansi colored output in my terminal
Now if I execute foo.pyin a systemd unit and journalctl --all -u foo.service --output cat -f all output is monochrome.
How can I journalctl systemd ...
- 399
0
votes
0
answers
59
views
Why jouranlctl uses --utc by default when running without root privigies?
On a host running Ubuntu 20.04 LTS I notice that, by default, journalctl (without root privileges) is the same as journalctl --utc, but with root privileges journalctl honors the time zone (as shown ...
- 2,462
0
votes
0
answers
221
views
systemd, journalctl, and suspend/resume (sleep/wake): marked by default in the logs? Or how to add? And scripting around suspend/resume in general?
(
First of all, I'm not completely sure what the official terms are.
I think it's "suspend"/"resume",
with "sleep"/"wake" being synonyms
(and I'm not sure if ...
- 23
0
votes
2
answers
67
views
How to find the source of "Got unexpected auxiliary data with level=1 and type=2"
I see many entries of "Got unexpected auxiliary data with level=1 and type=2" in journalctl, but there is no hint where these are generated. The number of log entries is high. I cannot brain-...
- 13
3
votes
0
answers
411
views
In journalctl internal grep, is it possible to specify option to only output matched pattern?
I have the following journal messages:
$ journalctl _COMM=kwin_wayland -o cat --since "-10s"
...
kwin_screencast: Dropping a screencast frame because the compositor is slow
kwin_screencast: ...
- 819
1
vote
1
answer
104
views
How to tell journalctl do display exactly two priorities?
I would like to show only crit and info and nothing in between.
I tried:
journalctl -p 2..2 -p 6..6
But it doesn't work. The second argument seems to override the first.
The following code produces a ...
- 3,479
0
votes
0
answers
148
views
Why is journalctl not working after I just created a cloud Ubuntu server?
journalctl responds with No journal files were found, after I just created the cloud Ubuntu server, and have access it through the web based console.
I've pasted the console output below
2023-06-18T03:...
- 50
0
votes
0
answers
136
views
How do I use systemctl status httpd with -l, --full option. I cannot see the whole content of long lines in the output
I want to check the status of httpd on my system.
I want to use it with -l, --full option, to see the whole contents of the long lines.
I've read it here, that there's option like -l, --full which ...
- 249
0
votes
1
answer
290
views
How to filter journalctl logs by human readable facility?
I can do the following to get local3 logs:
journalctl SYSLOG_FACILITY=19
The magic number 19 is uterly confusing. How can I do the following:
journalctl WHAT_TO_PUT_HERE=local3
?
I do not see ...
- 860
0
votes
0
answers
65
views
New rsyslogd for Fedora?
I have always used rsyslog for my Fedora installations (KDE only), to see informational messages in my (rooted) console, specially kernel messages. Yet, in the last Fedora versions it seems that this ...
- 313
3
votes
2
answers
999
views
What are the .journal files that have a ~ on the end?
I have some files in my /var/log/journal/f7e928ba68a9449e85bd828252981fc6/ that have a .journal~ extension.
Can I remove these?
example:
-rw-r-----+ 1 root systemd-journal 16777216 Dec 21 08:46 ...
- 53
0
votes
0
answers
116
views
After updating computer enters in Emergency mode in KDE neon
I'm not sure if I'm posting in the right place. If it's so just let me know. Yesterday updated normally and when it rebooted it opens with the "emergency mode" and the "journalctl -xb&...
0
votes
1
answer
130
views
Why is a gap between `journalctl -k -b -0` and `ps ho lstart 1`?
I encounter a strange observation:
If I do: journalctl -k -b -0 | sed -e 's/^\(.\{76\}\).*/\1.../;3q'
I will see something like:
-- Journal begins at Sun 2022-08-07 12:06:55 CEST, ends at Mon 2023-02-...
0
votes
1
answer
6k
views
How to resolve journalctl error - journal header limits reached or header out of date
What is the cause of the error ”Journal header limits reached or header out-of-date, rotating” and what can be done to fix it?
journalctl (systemd-journald[###]) reports journal errors:
Data hash ...
- 412
0
votes
0
answers
216
views
Disable journalctl logging for systemd user unit without entirely suppressing stdout
I'd like to suppress a certain user unit's output to the journalctl log without entirely suppressing output as I'd still like to be able to check it with systemctl status --user whatever_unit. I ...
2
votes
0
answers
182
views
Default output mode for journalctl
Is there a way to make, for example, --output=cat the default output mode for a journalctl?
Can't find something in journald.conf(5) or journalctl(1)?
P.S. shell alias is too obvious. I'm looking for ...
- 121
0
votes
1
answer
111
views
Extract journalctl/system log "Process 1234 (processname) of user 1000 dumped core" messages into separate files
Here's a simple issue.
I want an overview, e.g. separate files with debug information for each process which has dumped core extracted from journalctl.
Here's a sample output:
Jan 17 12:49:45 ...
- 27.4k
1
vote
0
answers
224
views
journalctl -b -1 always shows the same log?
When reading the manual for journalctl I get the impression that -b -1 will show the boot one before the most recent.
When I use it I'm always shown the same log. Did I misunderstand something? I've ...
- 511
0
votes
0
answers
39
views
Debian runs only under root without xorg
Nothing foretold any trouble, but my system completely crashed after formatting a neighboring partition (with Windows) and installing new Windows on it.
The main things I did were
Formatted the ...
- 1
0
votes
0
answers
117
views
How to fix sudo due to some issues with the user?
My system based on CentOS. When I am running command with a sudo I got and error:
for example I am trying to restart nginx:
-> sudo systemctl restart nginx
[sudo] password for rd\eldar.nafajov:
...
- 1
3
votes
1
answer
2k
views
How can I use journalctl to time-filter and view non-journal files?
I'm trying to search through dozens of logfiles that were not sent to systemd-journald, and would like to filter the results by time, the way journalctl's -S (since) and -U (until) do.
Option 1: ...
- 163
0
votes
0
answers
95
views
Autoconfigure Error: g_multi: waiting for /sys/class/net/usb0/
I am receiving a new systemd journal message on my debian linux system. It is as follows:
Nov 30 20:41:42 beaglebone sh[628]: autoconfigure_usb0.sh: g_multi: waiting for /sys/class/net/usb0/
This ...
0
votes
1
answer
966
views
systemd journal is not stored in /var/log/journal and not persistent after reboots
My embedded box is running Linux 5.15 with systemd 251 (251.2+).
I have configured persistent logging for journal.
/etc/systemd/journald.conf
[Journal]
Storage=persistent
Created folder /var/log/...
- 21
1
vote
1
answer
1k
views
Commands to read the content of .journal file?
Well, the answer is simple - using command "journalctl".
But let me describe the problem first,
I encountered an ubuntu server crash event and some log/.journal files were extracted ...
- 57
1
vote
0
answers
166
views
Surface Pro 9 sticks at shutdown, how to trace the problem?
I tried installing three distros on SP9: Ubuntu 22.04.1, Ubuntu 22.10, KaliLinux 2022.3, there is problem with all these distros that it sticks at shutdown.
After typing shutdown now in terminal, the ...
- 215
1
vote
0
answers
7k
views
systemd-journal is using 100% cpu
This is the result of top command
I caught it at 99.7% but It even uses 170%. this is the output of journalctl
I thought it is something related to Bluetooth, so I turned it off but still got the ...
- 319
1
vote
0
answers
150
views
Journalctl show multiple boots working together
While working with my services, and looking for the output using "Journalctl". I found there is miss behavior in my service and two running boots logging and alternate together.
Could some ...
- 11
0
votes
1
answer
295
views
Why does journaltcl logs start only today when the last reboot was done 5 days before?
Why does journaltcl logs start only today when the last reboot was done 5 days before ? :
$ journalctl -e | grep Logs.begin
-- Logs begin at Tue 2022-09-06 09:42:37 CEST, end at Tue 2022-09-06 11:04:...
- 2,041
2
votes
1
answer
634
views
How to display echo messages from a systemd-timer script in journalctl?
I run via a systemd timer a shell script that starts some programs (they display some output) and uses echo to provide some feedback.
root@srv ~ [127]# cat /etc/systemd/system/borg.timer
[Unit]
...
- 1,465
5
votes
1
answer
4k
views
journalctl set default datetime format
How can I configure the journalctl output to use a specified date format?
I know I can parse out the line and convert to a date format, but I'm hoping to see the log lines with the ISO format.
- 1,998
4
votes
4
answers
5k
views
How to keep systemd journal for one year?
By default my system had about ~500MB max size which had about 1 month of logs.
System Journal (/var/log/journal/dd35c7606a5645c5acc9908470c45159) is 483.2M, max 491.5M, 8.2M free.
No idea how the ...
- 4,367
3
votes
2
answers
353
views
How to follow systemd journald logs for template units that come and go (i.e. socket-activated units)?
I have a inetd-style service deployed as a systemd socket unit and its accompanying service unit, say, my-service.socket with Accept=true and [email protected].
Each time a new connection is ...
1
vote
0
answers
596
views
systemd-journald is not persisting logs on system running Docker
Every hour or so systemd-journald is deleting any logs older than about an hour instead of persisting them to /var/log/journal/. I have set storage=persistent in journal.conf. Whenever the logs rotate ...
- 11
1
vote
1
answer
297
views
What causes journal logs to end with tilde (~)? [duplicate]
Many of my journal log files consistently are named ending with tilde, e.g. -
/var/log/journal/dc104498c02e4392903c4b68c856a662 $ ls -ltrh
total 768M
-rw-r-----+ 1 root systemd-journal 8.0M Jun 11 11:...
- 113
0
votes
0
answers
598
views
journalctl to Query Another Machine's Journal?
Can one use journalctl to read or query another machine's journal?
This would seem trivial and obvious on its face but evidently is not. The journalctl man pages and Google reveal nothing on the ...
- 301
3
votes
2
answers
9k
views
How do I resolve Ipv6 related errors from NetworkManager
I started using nmcli instead of just iwd. I usually have ipv6 disabled. It works just fine but I'd like to get rid of th warnings.
# sudo journctl -u NetworkManager
May 30 09:51:59 1337 ...
- 139
5
votes
1
answer
2k
views
journalctl output disable colorization
I have a dark background for my console so there's quite a bit of journalctl output that is unreadable.
I see lots of information about how to add color! But how do I completely disable it?
- 1,998
0
votes
1
answer
2k
views
journald RuntimeMaxUse is ignored, quota tied to RuntimeMaxFileSize instead
Setup
Using systemd 244 (244.5+) on kernel 4.19.62.
I want to set the total journal storage size to 100MB. Journald is set to volatile storage, so logs end up on /run/log/journal/... and RuntimeMaxUse ...
0
votes
1
answer
419
views
SystemD JournalD cannot disable child process output
I am running SystemD version 249.7+ on a custom embedded Linux device with Kernel 5.10.50. I am using Podman 4.0.2 with Docker-Compose to run a few containers. The problem I have is that the 'conmon' ...
- 69
2
votes
1
answer
2k
views
journalctl --user -u myservice "No journal files were found", for a specific user
Problem:
systemd user units journalctl output display "No journal files were found." This only happens for the one sss user I am testing with, all local users seem to work fine. EDIT: sss ...
- 572
1
vote
1
answer
900
views
systemctl / journal distinguish if service was restarted, not stopped and started
Is there a way to check if a service was restarted? When performing a systemctl restart myunit.service or systemctl --user restart myunit.service, the logs only show that my unit was stopped and then ...
- 572
0
votes
0
answers
43
views
linux joournalctl read specified input file and not the local syslog
I know this is a long shot. Im missing something from the man pages I can find.
I've setup remote event /system logging to a log server (syslog-ng). That works fine.
It has its own log dir and each ...
- 11
1
vote
0
answers
566
views
systemd-journald[304]: Journal stopped
Whenever I try to shutdown my system, it just ends up stuck on a black screen with a blinking cursor in the top left.
I'm running Ubuntu 20.04 LTS.
I have done a fresh install of Ubuntu twice with no ...
- 11
3
votes
1
answer
389
views
Logs partly lost after crash
I am trying to fix an issue with PM (suspend) on my laptop,
therefore I enabled some logging for my kernel (pm_debug_messages) to look at it afterwards using journalctl.
The problem is:
Whenever my ...
- 288
0
votes
0
answers
2k
views
How can I find out which device or resource is busy?
I'm looking for advice troubleshooting an issue related to 'cgroups' on Ubuntu 18.04.
An application (Mullvad) gives the following error in journalctl:
[mullvad_daemon][ERROR] Error: Unable to ...
- 183
0
votes
1
answer
735
views
Armbian logs for previous boots
I'm using armbian and have a problem with freezes on boot. I wanted to look into logs to understand why, but occasionaly I have only one log with current session:
journalctl --list-boots
returns only ...
- 23
1
vote
0
answers
2k
views
How can I redirect journalctl output from a systemctl --user service to a file?
I need to redirect systemd output (Not the binaries stdout / stderr. I mean the actual systemd output send to journalctl) to a file for a specific user unit.
I know the user can view journalctl with ...
- 572
3
votes
2
answers
28k
views
Systemd Service Failing with exit-code status=203/EXEC
I am trying to create a service to run on boot. The service is a program I wrote in C++ and compiled and is located in my users home directory. The program opens some UDP sockets and sits in an ...
- 33