Skip to main content

Questions tagged [systemd-journald]

For questions pertaining to systemd-journald, a system service that collects and stores logging data. Use this tag for questions about systemd-journald itself, using systemd-journald, or questions about issues arising from collecting and storing logging data in systems where this task is performed by systemd-journald.

Filter by
Sorted by
Tagged with
2 votes
2 answers
543 views

How often does systemd journal collect/read logs from sources

I have a program that generates several logs per second and I want to track these logs in real time using the journal, but it seems there is delay for the journal to collect/read logs from the source. ...
I have 10 fingers's user avatar
0 votes
1 answer
19 views

omit command output on systemd-run

when running systemd-run --pty --same-dir --wait --service-type=exec I get all the command output in journal. While nice, it is not something I want/can afford all the time. for example, if I want ...
gcb's user avatar
  • 418
0 votes
0 answers
17 views

JournalD leaving 4GB free while I have specifically configured to leave 20% that is around 25GB?

I have configurad journald with following conf, [test@mcmillan ~]# cat /etc/systemd/journald.conf [Journal] Storage=persistent Compress=True RateLimitInterval=1s RateLimitBurst=10000 SyncIntervalSec=...
Ajay Tom George's user avatar
0 votes
0 answers
19 views

Systemd instance units with dynamic parameters

I have a server that continuously deploys new version of the application. systemctl start [email protected] # start new version systemctl stop [email protected] # shutdown old processes Is ...
mq7's user avatar
  • 101
1 vote
0 answers
25 views

Systemd logging to journal stops after service outputs very long lines

I have a process that outputs its logs to standard error, and I'm running it as a systemd service with Type=simple. I have left the StandardError and StandardOutput fields at their default values (...
Guss's user avatar
  • 12.8k
0 votes
0 answers
17 views

Is it impossible to limit journalctl to a user service?

I am specifically NOT asking about how a user can look at their own logs, I am asking how at root level, where I see user service logs with a plain call to sudo journalctl --output with-unit like so: ...
Torque's user avatar
  • 131
0 votes
0 answers
37 views

How to force systemd unit to log into journal instead of syslog

For some time now I'm trying to force systemd unit I created to log command output to systemd journal. It logs only to syslog. Here is my config: $ cat /etc/systemd/system/sf-synchronize.service [...
piotrekkr's user avatar
  • 569
0 votes
0 answers
45 views

finding more information on journald failure

System locked up with console full of systemd-journald[123]: Failed to write entry to /var/log/journal/b5...1c/user-100.journal (29 items, 820 bytes) despite vacuuming, ignoring: input/output error (...
gcb's user avatar
  • 418
7 votes
2 answers
834 views

Is it possible to dynamically refresh journalctl with less?

I'm using less to view my journalctl logs because it's more convenient. It doesn't clutter the console window with logs after you exit less and you can scroll using your mouse wheel. journalctl --unit ...
fire84392's user avatar
2 votes
1 answer
116 views

How to continue journal output to serial console after dev-mqueue.mount is started

So far I managed to get the kernel & systemd to output the first log messages from booting on the system’s serial port. Further, after the boot process is (nearly) completed, journald continues to ...
Felix Stupp's user avatar
0 votes
0 answers
36 views

How can I force systemd journalctl to output log in sequential order in case of frequent clock changes?

I have a standalone debian-based system that -- for the simplicity -- can be taken as not having RTC. The system clock can be set during operation, both forwards and backwards. I thought that ...
Ferenc's user avatar
  • 101
0 votes
0 answers
47 views

Dnsmasq - Do not log certain queries/websites?

I have dnsmasq logging to my systemd-journal on a machine hosting an apache server. The server is quite busy, causing around 600.000 log lines to accumulate within 4-5 hours. Out of these logs, 94% ...
Elekam's user avatar
  • 1
1 vote
1 answer
94 views

ping output sporadically missing (labeled as wrong unit) in journal of systemd service

I am using ping in a script, which runs in a systemd service unit. The output from ping is sometimes (often) missing in the unit's journal. I.e., it is missing from journalctl --user -u MyUnit. Note ...
dialer's user avatar
  • 143
0 votes
0 answers
156 views

is it possible to prevent rsyslog messages going to systemd-journal log and how?

I have an iptables rule that is logging some of my networks activities into a log file using the jump LOG rule. I filter the events to go to a specific file using the following rsyslog configuration ...
Or Yaacov's user avatar
0 votes
1 answer
59 views

Trying to periodically backup /var/log while using journald

I'm trying to periodically backup my /var/log directory, but journald manages the logging on my system. Is the correct way to just tar -cf log.tar /var/log? The way journald saves it's log files in /...
user9503's user avatar
0 votes
0 answers
60 views

How can I set journald settings for non-root users?

I have a bunch of services that run under non-root users automatically. I've modified my /etc/systemd/journald.conf to limit the maximum allowed filesize, but it doesn't work on systemd services that ...
Raven's user avatar
  • 1,303
0 votes
0 answers
28 views

What needs to be done, based on the following in order to successfully boot into the system?

Ran this command: sudo fsck -fvy /dev/mapper/root_vg-home Here's the output: fsck from util-linux 2.30 e2fsck 1.46.5 (30Dec-2021) fsck.ext2: No such file or directory while trying to open /dev/mapper/...
Alfredm's user avatar
0 votes
0 answers
392 views

Why jouranlctl uses --utc by default when running without root privigies?

On a host running Ubuntu 20.04 LTS I notice that, by default, journalctl (without root privileges) is the same as journalctl --utc, but with root privileges journalctl honors the time zone (as shown ...
Pablo A's user avatar
  • 2,781
0 votes
0 answers
621 views

systemd-journald.service fails to load during boot

I've accidentally unplugged my NAS and after plugging back it fails to boot because of the following error: [ 105.556720] systemd[1]: systemd-timesyncd.service: Main process exited, code=killed, ...
Kamil's user avatar
  • 1
0 votes
2 answers
73 views

Journal: which services are filling up the allowed journal-size?

On a Debian machine, by default the systemd-journal is caring about the logs. It's configuration limits the max disk space it can use: $ cat /etc/systemd/journald.conf SystemMaxUse=100M SystemKeepFree=...
Daniel's user avatar
  • 339
0 votes
0 answers
592 views

systemd, journalctl, and suspend/resume (sleep/wake): marked by default in the logs? Or how to add? And scripting around suspend/resume in general?

( First of all, I'm not completely sure what the official terms are. I think it's "suspend"/"resume", with "sleep"/"wake" being synonyms (and I'm not sure if ...
dwawlyn's user avatar
  • 23
0 votes
0 answers
395 views

Audit Logging Discrepancy: Journald vs Rsyslog

After installing Debian 12 and rsyslog 8.2302 (for TLS remote syslog), I noticed that apparmor logs (or any audit logs) were not being sent remotely. After reviewing the local system, journald DOES ...
user avatar
3 votes
2 answers
519 views

`journald` vs `systemd-journald` - are they the same notions?

I am new to systemd. I have read that along with systemd boot system comes it's own logging daemon - journald. But there is also a lot of mention of systemd-journald daemon over the Internet. At first ...
mipo256's user avatar
  • 133
-1 votes
1 answer
2k views

How to use journalctl with custom log file

I would like to make a backup of journal log files from a different machine and analyze them locally (while the other machine will get reformatted). How can I: Create a full backup of journal logs ...
HubertNNN's user avatar
  • 193
0 votes
1 answer
494 views

Can I mount `/var/log/journal` as `tmpfs`?

I have read this question, but it discusses syslog and my question is about journald. Can I mount /var/log/journal as tmpfs using fstab, or will journald be run (and therefore maybe write to the ...
donaastor's user avatar
  • 214
0 votes
1 answer
678 views

Why all Xorg log messages are written to journal at level 4 (warning)?

All the content of Xorg.n.log can be viewed with journalctl. As Xorg is launched by GDM (if I understand it correctly), it always has the --identifier=/usr/libexec/gdm-x-session. But despite this hint ...
Kelly Roadkill's user avatar
0 votes
1 answer
556 views

How to filter journalctl logs by human readable facility?

I can do the following to get local3 logs: journalctl SYSLOG_FACILITY=19 The magic number 19 is uterly confusing. How can I do the following: journalctl WHAT_TO_PUT_HERE=local3 ? I do not see ...
KamilCuk's user avatar
  • 870
0 votes
1 answer
481 views

rtkit daemon: setting logging for systemd service

My journal is littered with instances of rtkit-daemon[1407]: Supervising 8 threads of 5 processes of 1 users1 I see this excellent post from @MC68020 Stop rtkit-daemon from spamming logs with "...
Stephen Boston's user avatar
1 vote
2 answers
1k views

Why all output of my C program directed to stdout is sent to journald?

I work on yocto based linux distribution. I'm no expert on systemd and neither on systemd-journald. My C program my_c_program is started at boot by the script my_script.sh. Below there is the file ...
User051209's user avatar
0 votes
0 answers
447 views

Why is /fd/1 (stdout) a socket?

I'm running a game server as a systemd service, and in the .service file, I see that StandardOutput defaults to journal. Ihsan@IhsanServerVM:/proc/28617/fd$ file 1 1: symbolic link to socket:[510374] ...
ihsan's user avatar
  • 101
2 votes
2 answers
6k views

systemd-journal-flush.service Failed with result timeout - Failed to start Flush Journal to Persistent Storage

I see this on my systemctl log, the systemd-journal-flush.service fails to start with a timeout error. Server is apparently running fine though. OS is CentOS 8. Logs don't tell much about the error. ...
ariel's user avatar
  • 123
3 votes
2 answers
1k views

What are the .journal files that have a ~ on the end?

I have some files in my /var/log/journal/f7e928ba68a9449e85bd828252981fc6/ that have a .journal~ extension. Can I remove these? example: -rw-r-----+ 1 root systemd-journal 16777216 Dec 21 08:46 ...
Oppie's user avatar
  • 53
2 votes
1 answer
553 views

Log particular systemd service logs only to syslog bypasing journald

For a while looking for a solution that with systemd tools will give me an opportunity to bypass the journal and log directly to syslog. Potentially that can be also filtered, but only on journal not ...
jareeq's user avatar
  • 123
0 votes
1 answer
231 views

Why is a gap between `journalctl -k -b -0` and `ps ho lstart 1`?

I encounter a strange observation: If I do: journalctl -k -b -0 | sed -e 's/^\(.\{76\}\).*/\1.../;3q' I will see something like: -- Journal begins at Sun 2022-08-07 12:06:55 CEST, ends at Mon 2023-02-...
F. Hauri  - Give Up GitHub's user avatar
2 votes
3 answers
611 views

How is syslog entangled with journald?

I set up my journald to limit the log size to 5GB in /etc/systemd/journald.conf and thought everything was fine. Then, yesterday, I realized that my /var/log/syslog file is in fact 12GB big. What I ...
flood's user avatar
  • 328
0 votes
1 answer
518 views

Do kernel messages go through syslogd or journald?

I'm using Debian. Debian ships with rsyslogd for its syslogd. It also ships journald. Does the kernel log to rsyslogd first, or journald? I want to filter one of the messages out of the logs which is ...
Evan Carroll's user avatar
  • 31.7k
1 vote
1 answer
87 views

What does it mean to say journald collects logs in an "unfakeable way"?

It is said in the systemd-journald.service man page: The daemon will implicitly collect numerous metadata fields for each log messages in a secure and unfakeable way. See systemd.journal-fields(7) ...
GabrijelOkorn's user avatar
1 vote
2 answers
912 views

Systemd `journalctl` - Unable to change default $PAGER

I'm on Arch Linux. I came across some new pager software called OV and installed it. It has more features than less and I like it so I want to set it as my default pager. I added the following to my ....
Casper's user avatar
  • 113
3 votes
2 answers
6k views

How to setup syslog forwarding for systemd journal namespace

I have a configuration /etc/systemd/[email protected] which contains the setting ForwardToSyslog=yes and a systemd service unit configured with LogNamespace=my-namespace. The documentation ...
Aaron Enberg's user avatar
1 vote
0 answers
956 views

systemd-journal-remote claims that the logfile is corrupt

I am trying to upload my journald logs from a server to a centralized server. I am using systemd-journal-remote and systemd-journal-upload for this. The initial sync of existing logs goes perfectly. ...
user455443's user avatar
3 votes
2 answers
3k views

Run systemd service only if script condion is True

I have a systemd service that writes to a LCD screen as below; [Unit] Description=LCD Screen [Service] Type=simple User=admin WorkingDirectory=/lcd ExecStart=sudo /run_lcd.py StandardOutput=syslog ...
Madz's user avatar
  • 145
0 votes
0 answers
1k views

Systemd service does not print output to console/syslog/journal

UPDATED: SEE BOTTOM I have created a systemd service on debian Linux with systemd version 241 whose purpose is to start up a compiled accelMonitor.c that connects to a kernel module. This kernel ...
Dillon McCardell's user avatar
3 votes
1 answer
466 views

How does journald get the very starting up message from kernel?

I believe systemd-journald starts logging after the kernel starts up and need some time to set systems up like storage and network services. But journal log has the kernel messages like dmesg has even ...
HirofumiTamori's user avatar
0 votes
1 answer
697 views

How to prevent journald from writing to console?

When I check my Centos Stream 9 console, I see messages written by journald to the console even before logging in. Above are some example messages. How can I prevent journald from witing ANY message ...
Reza's user avatar
  • 198
4 votes
0 answers
11k views

systemd-journal is using 100% cpu

This is the result of top command I caught it at 99.7% but It even uses 170%. this is the output of journalctl I thought it is something related to Bluetooth, so I turned it off but still got the ...
Yilmaz's user avatar
  • 379
2 votes
0 answers
661 views

/dev/log: Connection refused after boot, but only on one system

I have two systems running NVIDIA jetpack 5.0.2, based on Ubuntu 20.04. /etc and /boot are identical on both systems. On the first system, after boot, if I try to run logger I get an error /dev/log: ...
Jayen's user avatar
  • 211
8 votes
1 answer
748 views

Firefox spamming SECCOMP events to journal/syslog - how to fix?

Since I updated to the snap-based Firefox on Ubuntu recently, I see it reporting SECCOMP_RET_TRAP messages to the journal whenever some application is drawing a canvas. And since applications drawing ...
foo's user avatar
  • 133
0 votes
1 answer
453 views

Why does journaltcl logs start only today when the last reboot was done 5 days before?

Why does journaltcl logs start only today when the last reboot was done 5 days before ? : $ journalctl -e | grep Logs.begin -- Logs begin at Tue 2022-09-06 09:42:37 CEST, end at Tue 2022-09-06 11:04:...
SebMa's user avatar
  • 2,209
3 votes
0 answers
864 views

WSL service logging like journald

I am running a WSL instance on my machine which starts a bunch of services like atd. What I would like to have is to have an ability to lookup the logs of a specific service like I would do using ...
777moneymaker's user avatar
2 votes
1 answer
892 views

How to display echo messages from a systemd-timer script in journalctl?

I run via a systemd timer a shell script that starts some programs (they display some output) and uses echo to provide some feedback. root@srv ~ [127]# cat /etc/systemd/system/borg.timer [Unit] ...
WoJ's user avatar
  • 1,575

1
2 3 4 5 6