Skip to main content

Questions tagged [journalctl]

Questions about journalctl - the tool used to manage, query and view logs on systemd setups.

Filter by
Sorted by
Tagged with
0 votes
0 answers
17 views

JournalD leaving 4GB free while I have specifically configured to leave 20% that is around 25GB?

I have configurad journald with following conf, [test@mcmillan ~]# cat /etc/systemd/journald.conf [Journal] Storage=persistent Compress=True RateLimitInterval=1s RateLimitBurst=10000 SyncIntervalSec=...
Ajay Tom George's user avatar
0 votes
0 answers
17 views

Is it impossible to limit journalctl to a user service?

I am specifically NOT asking about how a user can look at their own logs, I am asking how at root level, where I see user service logs with a plain call to sudo journalctl --output with-unit like so: ...
Torque's user avatar
  • 131
7 votes
2 answers
855 views

Is it possible to dynamically refresh journalctl with less?

I'm using less to view my journalctl logs because it's more convenient. It doesn't clutter the console window with logs after you exit less and you can scroll using your mouse wheel. journalctl --unit ...
fire84392's user avatar
1 vote
1 answer
33 views

What is the second time sequence column in journalctl?

I am trying to remove all time-date stamps and sequencing from my journalctl output For example sudo journalctl -eu NetworkManager [ 130.787316] user NetworkManager[713]: <info> [1707206156....
raquel's user avatar
  • 11
1 vote
1 answer
37 views

suppress cron emails from cleaning systemlog if 0B were cleaned

When cron runs 0 16 * * * journalctl --vacuum-time=10d I get an email with the content like Vacuuming done, freed 0B of archived journals from /var/log/journal. Vacuuming done, freed 0B of ...
rubo77's user avatar
  • 29.4k
0 votes
1 answer
24 views

How to check running output for a process which is not being explicitly logged?

One of our machines is running geth ( ethereum blockchain client ) ideally, to check the program output, we will have something like this; geth --datadir ./myDataDir --networkid 1114 console 2>> ...
Muhammad Yasir's user avatar
0 votes
0 answers
84 views

Enable journalctl within Ubuntu container

I've got an Ubuntu 22.04 container running on a MacOS host. Inside the container, I'm fiddling with routing and would like to add some -j LOG rules to iptables to see where my packets are going. ...
Daniel Walker's user avatar
1 vote
1 answer
319 views

Is there any way to enable ansi colors in journalctl logs?

foo.py prints ansi colored output in my terminal Now if I execute foo.pyin a systemd unit and journalctl --all -u foo.service --output cat -f all output is monochrome. How can I journalctl systemd ...
jjk's user avatar
  • 411
0 votes
0 answers
409 views

Why jouranlctl uses --utc by default when running without root privigies?

On a host running Ubuntu 20.04 LTS I notice that, by default, journalctl (without root privileges) is the same as journalctl --utc, but with root privileges journalctl honors the time zone (as shown ...
Pablo A's user avatar
  • 2,821
0 votes
0 answers
608 views

systemd, journalctl, and suspend/resume (sleep/wake): marked by default in the logs? Or how to add? And scripting around suspend/resume in general?

( First of all, I'm not completely sure what the official terms are. I think it's "suspend"/"resume", with "sleep"/"wake" being synonyms (and I'm not sure if ...
dwawlyn's user avatar
  • 23
0 votes
2 answers
150 views

How to find the source of "Got unexpected auxiliary data with level=1 and type=2"

I see many entries of "Got unexpected auxiliary data with level=1 and type=2" in journalctl, but there is no hint where these are generated. The number of log entries is high. I cannot brain-...
Thomas's user avatar
  • 23
4 votes
0 answers
2k views

In journalctl internal grep, is it possible to specify option to only output matched pattern?

I have the following journal messages: $ journalctl _COMM=kwin_wayland -o cat --since "-10s" ... kwin_screencast: Dropping a screencast frame because the compositor is slow kwin_screencast: ...
Ashark's user avatar
  • 979
2 votes
1 answer
297 views

How to tell journalctl do display exactly two priorities?

I would like to show only crit and info and nothing in between. I tried: journalctl -p 2..2 -p 6..6 But it doesn't work. The second argument seems to override the first. The following code produces a ...
ceving's user avatar
  • 3,639
0 votes
1 answer
562 views

How to filter journalctl logs by human readable facility?

I can do the following to get local3 logs: journalctl SYSLOG_FACILITY=19 The magic number 19 is uterly confusing. How can I do the following: journalctl WHAT_TO_PUT_HERE=local3 ? I do not see ...
KamilCuk's user avatar
  • 870
3 votes
2 answers
1k views

What are the .journal files that have a ~ on the end?

I have some files in my /var/log/journal/f7e928ba68a9449e85bd828252981fc6/ that have a .journal~ extension. Can I remove these? example: -rw-r-----+ 1 root systemd-journal 16777216 Dec 21 08:46 ...
Oppie's user avatar
  • 53
0 votes
0 answers
142 views

After updating computer enters in Emergency mode in KDE neon

I'm not sure if I'm posting in the right place. If it's so just let me know. Yesterday updated normally and when it rebooted it opens with the "emergency mode" and the "journalctl -xb&...
David Baytelman's user avatar
0 votes
1 answer
238 views

Why is a gap between `journalctl -k -b -0` and `ps ho lstart 1`?

I encounter a strange observation: If I do: journalctl -k -b -0 | sed -e 's/^\(.\{76\}\).*/\1.../;3q' I will see something like: -- Journal begins at Sun 2022-08-07 12:06:55 CEST, ends at Mon 2023-02-...
F. Hauri  - Give Up GitHub's user avatar
2 votes
1 answer
15k views

How to resolve journalctl error - journal header limits reached or header out of date

What is the cause of the error ”Journal header limits reached or header out-of-date, rotating” and what can be done to fix it? journalctl (systemd-journald[###]) reports journal errors: Data hash ...
iletras's user avatar
  • 442
2 votes
0 answers
378 views

Default output mode for journalctl

Is there a way to make, for example, --output=cat the default output mode for a journalctl? Can't find something in journald.conf(5) or journalctl(1)? P.S. shell alias is too obvious. I'm looking for ...
Pavel Sapezhko's user avatar
0 votes
1 answer
192 views

Extract journalctl/system log "Process 1234 (processname) of user 1000 dumped core" messages into separate files

Here's a simple issue. I want an overview, e.g. separate files with debug information for each process which has dumped core extracted from journalctl. Here's a sample output: Jan 17 12:49:45 ...
Artem S. Tashkinov's user avatar
1 vote
0 answers
422 views

journalctl -b -1 always shows the same log?

When reading the manual for journalctl I get the impression that -b -1 will show the boot one before the most recent. When I use it I'm always shown the same log. Did I misunderstand something? I've ...
Andreas's user avatar
  • 521
0 votes
0 answers
49 views

Debian runs only under root without xorg

Nothing foretold any trouble, but my system completely crashed after formatting a neighboring partition (with Windows) and installing new Windows on it. The main things I did were Formatted the ...
crjtical's user avatar
0 votes
0 answers
146 views

How to fix sudo due to some issues with the user?

My system based on CentOS. When I am running command with a sudo I got and error: for example I am trying to restart nginx: -> sudo systemctl restart nginx [sudo] password for rd\eldar.nafajov: ...
inajaf's user avatar
  • 1
4 votes
1 answer
6k views

How can I use journalctl to time-filter and view non-journal files?

I'm trying to search through dozens of logfiles that were not sent to systemd-journald, and would like to filter the results by time, the way journalctl's -S (since) and -U (until) do. Option 1: ...
PFudd's user avatar
  • 173
0 votes
0 answers
120 views

Autoconfigure Error: g_multi: waiting for /sys/class/net/usb0/

I am receiving a new systemd journal message on my debian linux system. It is as follows: Nov 30 20:41:42 beaglebone sh[628]: autoconfigure_usb0.sh: g_multi: waiting for /sys/class/net/usb0/ This ...
Dillon McCardell's user avatar
0 votes
1 answer
1k views

systemd journal is not stored in /var/log/journal and not persistent after reboots

My embedded box is running Linux 5.15 with systemd 251 (251.2+). I have configured persistent logging for journal. /etc/systemd/journald.conf [Journal] Storage=persistent Created folder /var/log/...
Rohit Pai's user avatar
1 vote
1 answer
3k views

Commands to read the content of .journal file?

Well, the answer is simple - using command "journalctl". But let me describe the problem first, I encountered an ubuntu server crash event and some log/.journal files were extracted ...
user53815's user avatar
1 vote
0 answers
215 views

Surface Pro 9 sticks at shutdown, how to trace the problem?

I tried installing three distros on SP9: Ubuntu 22.04.1, Ubuntu 22.10, KaliLinux 2022.3, there is problem with all these distros that it sticks at shutdown. After typing shutdown now in terminal, the ...
aj3423's user avatar
  • 215
4 votes
0 answers
11k views

systemd-journal is using 100% cpu

This is the result of top command I caught it at 99.7% but It even uses 170%. this is the output of journalctl I thought it is something related to Bluetooth, so I turned it off but still got the ...
Yilmaz's user avatar
  • 379
1 vote
0 answers
253 views

Journalctl show multiple boots working together

While working with my services, and looking for the output using "Journalctl". I found there is miss behavior in my service and two running boots logging and alternate together. Could some ...
K. Ghaleb's user avatar
0 votes
1 answer
459 views

Why does journaltcl logs start only today when the last reboot was done 5 days before?

Why does journaltcl logs start only today when the last reboot was done 5 days before ? : $ journalctl -e | grep Logs.begin -- Logs begin at Tue 2022-09-06 09:42:37 CEST, end at Tue 2022-09-06 11:04:...
SebMa's user avatar
  • 2,209
2 votes
1 answer
896 views

How to display echo messages from a systemd-timer script in journalctl?

I run via a systemd timer a shell script that starts some programs (they display some output) and uses echo to provide some feedback. root@srv ~ [127]# cat /etc/systemd/system/borg.timer [Unit] ...
WoJ's user avatar
  • 1,585
10 votes
1 answer
7k views

journalctl set default datetime format

How can I configure the journalctl output to use a specified date format? I know I can parse out the line and convert to a date format, but I'm hoping to see the log lines with the ISO format.
Stephen Boston's user avatar
4 votes
4 answers
7k views

How to keep systemd journal for one year?

By default my system had about ~500MB max size which had about 1 month of logs. System Journal (/var/log/journal/dd35c7606a5645c5acc9908470c45159) is 483.2M, max 491.5M, 8.2M free. No idea how the ...
balki's user avatar
  • 4,457
3 votes
2 answers
511 views

How to follow systemd journald logs for template units that come and go (i.e. socket-activated units)?

I have a inetd-style service deployed as a systemd socket unit and its accompanying service unit, say, my-service.socket with Accept=true and [email protected]. Each time a new connection is ...
twisteroid ambassador's user avatar
1 vote
0 answers
767 views

systemd-journald is not persisting logs on system running Docker

Every hour or so systemd-journald is deleting any logs older than about an hour instead of persisting them to /var/log/journal/. I have set storage=persistent in journal.conf. Whenever the logs rotate ...
Luke Rayner's user avatar
1 vote
1 answer
375 views

What causes journal logs to end with tilde (~)? [duplicate]

Many of my journal log files consistently are named ending with tilde, e.g. - /var/log/journal/dc104498c02e4392903c4b68c856a662 $ ls -ltrh total 768M -rw-r-----+ 1 root systemd-journal 8.0M Jun 11 11:...
KalEl's user avatar
  • 113
0 votes
0 answers
1k views

journalctl to Query Another Machine's Journal?

Can one use journalctl to read or query another machine's journal? This would seem trivial and obvious on its face but evidently is not. The journalctl man pages and Google reveal nothing on the ...
ebsf's user avatar
  • 331
4 votes
2 answers
14k views

How do I resolve IPv6 related errors from NetworkManager

I started using nmcli instead of just iwd. I usually have IPv6 disabled. It works just fine but I'd like to get rid of the warnings. # sudo journalctl -u NetworkManager May 30 09:51:59 1337 ...
Dominic's user avatar
  • 169
5 votes
1 answer
2k views

journalctl output disable colorization

I have a dark background for my console so there's quite a bit of journalctl output that is unreadable. I see lots of information about how to add color! But how do I completely disable it?
Stephen Boston's user avatar
0 votes
1 answer
3k views

journald RuntimeMaxUse is ignored, quota tied to RuntimeMaxFileSize instead

Setup Using systemd 244 (244.5+) on kernel 4.19.62. I want to set the total journal storage size to 100MB. Journald is set to volatile storage, so logs end up on /run/log/journal/... and RuntimeMaxUse ...
Neal Eastwood's user avatar
0 votes
1 answer
520 views

SystemD JournalD cannot disable child process output

I am running SystemD version 249.7+ on a custom embedded Linux device with Kernel 5.10.50. I am using Podman 4.0.2 with Docker-Compose to run a few containers. The problem I have is that the 'conmon' ...
PhilBot's user avatar
  • 29
3 votes
1 answer
3k views

journalctl --user -u myservice "No journal files were found", for a specific user

Problem: systemd user units journalctl output display "No journal files were found." This only happens for the one sss user I am testing with, all local users seem to work fine. EDIT: sss ...
Dave's user avatar
  • 621
1 vote
1 answer
1k views

systemctl / journal distinguish if service was restarted, not stopped and started

Is there a way to check if a service was restarted? When performing a systemctl restart myunit.service or systemctl --user restart myunit.service, the logs only show that my unit was stopped and then ...
Dave's user avatar
  • 621
0 votes
0 answers
51 views

linux joournalctl read specified input file and not the local syslog

I know this is a long shot. Im missing something from the man pages I can find. I've setup remote event /system logging to a log server (syslog-ng). That works fine. It has its own log dir and each ...
Jeff Baker's user avatar
2 votes
0 answers
681 views

systemd-journald[304]: Journal stopped

Whenever I try to shutdown my system, it just ends up stuck on a black screen with a blinking cursor in the top left. I'm running Ubuntu 20.04 LTS. I have done a fresh install of Ubuntu twice with no ...
Moz's user avatar
  • 21
3 votes
1 answer
494 views

Logs partly lost after crash

I am trying to fix an issue with PM (suspend) on my laptop, therefore I enabled some logging for my kernel (pm_debug_messages) to look at it afterwards using journalctl. The problem is: Whenever my ...
flood's user avatar
  • 328
0 votes
0 answers
2k views

How can I find out which device or resource is busy?

I'm looking for advice troubleshooting an issue related to 'cgroups' on Ubuntu 18.04. An application (Mullvad) gives the following error in journalctl: [mullvad_daemon][ERROR] Error: Unable to ...
Darien Marks's user avatar
1 vote
1 answer
976 views

Armbian logs for previous boots

I'm using armbian and have a problem with freezes on boot. I wanted to look into logs to understand why, but occasionaly I have only one log with current session: journalctl --list-boots returns only ...
Dmitry's user avatar
  • 143
2 votes
0 answers
3k views

How can I redirect journalctl output from a systemctl --user service to a file?

I need to redirect systemd output (Not the binaries stdout / stderr. I mean the actual systemd output send to journalctl) to a file for a specific user unit. I know the user can view journalctl with ...
Dave's user avatar
  • 621