2022 Developer Survey is open! Take survey.

Questions tagged [systemd-journald]

For questions pertaining to systemd-journald, a system service that collects and stores logging data. Use this tag for questions about systemd-journald itself, using systemd-journald, or questions about issues arising from collecting and storing logging data in systems where this task is performed by systemd-journald.

Filter by
Sorted by
Tagged with
0 votes
0 answers
13 views

Apt / Apt-get / dpkg no longer logging to journald

I have a systemd service that I install via debian package using the apt command on a raspberry pi 4. I've been using journalctl -xef to keep track of all log output for debugging purposes while ...
user avatar
0 votes
1 answer
14 views

why the journalctl --disk-usage not show the real log disk usage

when I am using this command to see the journal log size of CentOS 7: journalctl --disk-usage the output looks like this: [root@k8smasterone log]# journalctl --disk-usage Archived and active journals ...
user avatar
  • 351
0 votes
1 answer
27 views

Why does OpenSSH debug2 handshake logging only on some logins, not on every login?

Running Ubuntu 18.04.1 LTS with package openssh-server 7.6p1-4ubuntu0.5 In /etc/ssh/sshd_config is set LogLevel DEBUG2. I get the debug2 log message of the client MACs offering part of handshake: May ...
user avatar
  • 31
0 votes
0 answers
29 views

How to move log files in /var/log/journal to free disk space without losing logs?

I'd like to later check if there is a way / software to easily scan logs for issues one should look into² and if such exists scan all logs, including old logs. This is why for now I'd like to keep the ...
user avatar
  • 3,430
0 votes
0 answers
14 views

journalctl --vacuumtime=1h still shows logs from 3 days ago

After using the following command sudo journalctl --vacuum-time=1h (which should delete all logs except those written in the last hour) when I read logs with the command journalctl it still shows ...
user avatar
0 votes
1 answer
48 views

journald RuntimeMaxUse is ignored, quota tied to RuntimeMaxFileSize instead

Setup Using systemd 244 (244.5+) on kernel 4.19.62. I want to set the total journal storage size to 100MB. Journald is set to volatile storage, so logs end up on /run/log/journal/... and RuntimeMaxUse ...
user avatar
0 votes
1 answer
27 views

Redirect logs from file to Systemd journal

I have a program which is started by systemd service myprogram.service. Problem is that it is writing its logs directly to the log file /opt/myprogram/logs.txt. I want to redirect its logs into ...
user avatar
  • 3,872
1 vote
0 answers
52 views

When a systemd service starts a rootless `podman run` process, why is its output not associated with the service in the journal?

I have a simple systemd service in /etc/systemd/system/logtest.service, which creates a Podman container that outputs some text: [Unit] Description=Systemd log test [Service] Type=oneshot ExecStart=...
user avatar
  • 178
0 votes
0 answers
38 views

Turn off logging to journald for specified systemd service

I have a specific systemd service that I don't want its log to be logged to journald/journalctl. For now the reason is that it already logs to syslog (already rotated) and the journald/journalctl log ...
user avatar
  • 177
0 votes
0 answers
38 views

how to prevent sshd related messages from being written to systemd journal log

I'm running a raspberry pi on an SD card and the logs are constantly hammered with failed login attempts from botnets. Beyond filling the logs with useless information, this is putting wear and tear ...
user avatar
  • 191
0 votes
1 answer
101 views

Change JournalD loglevel of running SystemD service without reload

I have a simple service written in Python that is using SystemD JournalHandler for logging (SysLogHandler should work similarly). # myservice.py import time import logging from systemd.journal import ...
user avatar
0 votes
0 answers
13 views

Systemd logs do not appear when the system is shutting down

I noticed something on my Debian machine the other days. When I execute the poweroff command after running the sudo su command, the systemd logs appear, but if I execute the poweroff command with sudo ...
user avatar
  • 1
0 votes
0 answers
40 views

How to replay journald logs in real-time

Is there a way to visualize logs from journald, but replayed in "real-time", i.e. delay every log entry to match the original delay between each?
user avatar
  • 177
0 votes
1 answer
81 views

Force journald to keep logs for 30 days

I am using journalctl for logging, it appears to be only keeping logs for 1 hour, how can I force it to keep 30 days of logs?
user avatar
  • 119
1 vote
1 answer
167 views

The storage setting in /etc/systemd/journald.conf is commented out but the action is still being performed

#Storage=auto was set in journald.conf file and there was no /var/log/journal directory. Once I created that directory manually, ryslog started writing to it. What's the point of the line being ...
user avatar
  • 125
2 votes
1 answer
581 views

Stop rtkit-daemon from spamming logs with "Supervising X threads of Y processes of Z users"

journalctl -b | grep Supervising | wc -l 2819 Distro is Fedora 35, vanilla, with PipeWire running the show. I'm pretty sure all modern Linux distros are affected but people don't care. There's no ...
user avatar
1 vote
1 answer
38 views

Logs partly lost after crash

I am trying to fix an issue with PM (suspend) on my laptop, therefore I enabled some logging for my kernel (pm_debug_messages) to look at it afterwards using journalctl. The problem is: Whenever my ...
user avatar
  • 161
0 votes
2 answers
54 views

How to use systemd kernel argument systemd.journald.forward_to_syslog

I like to provision several machines via PXE, and pass the kernel argument systemd.journald.forward_to_syslog to all machine, so I can monitor all the logs from a central place. (I can't change the ...
user avatar
  • 3,638
0 votes
1 answer
66 views

Capture output of systemd-run --scope to journal

For improved traceability, accountability, etc., I want certain applications to be supervised by systemd and have their output collected in the journal. I know that this all happens automatically when ...
user avatar
1 vote
0 answers
45 views

systemd-journald delete logs after a specific date

Months ago, my computer had a hardware issue, and I reset the BIOS settings and RTC clock by pulling out the CMOS battery. Later when I put it back and restarted the computer, it worked correctly, but ...
user avatar
0 votes
2 answers
113 views

Stop citrix' icaclient unit to spam systemd's journal

I installed the citrix icaclient to be able to connect to my company's citrix server, but unfortunately, that software spams my journal log. This time, it either spawns a message: Okt 15 09:57:55 ...
user avatar
1 vote
0 answers
51 views

What method will determine why systemd failed to load a "Wanted" target?

I have an Ubuntu 20.04 system that uses systemd with a default target of graphical.target: $ systemctl get-default graphical.target If I follow the chain of "Requires" and "Wants",...
user avatar
0 votes
1 answer
221 views

Why systemd-journald is creating '/var/log/journal/machine_id" directory when Storage=auto

I was looking into the code of systemd-journald and found this (in system_journal_open()): if (!s->system_journal && IN_SET(s->storage, STORAGE_PERSISTENT, STORAGE_AUTO) && ...
user avatar
0 votes
1 answer
29 views

Why is "log_set_prohibit_ipc" set to true in systemd-journald?

I have just started to learn journald and in its main() function (in journald.c) I encountered a function call log_set_prohibit_ipc(true); Can anyone tell me why is it set to true by default?
user avatar
3 votes
0 answers
517 views

Fail to start systemd-journal

i have upgraded my linux rescently (apt-get upgrade) and now it can not boot successfully. The booting process stop at a middle and ask for root authentification to resolve the issue the log said ...
user avatar
  • 31
2 votes
1 answer
552 views

systemd-journald[356]: Failed to open system journal: Operation not supported

My /var/log/syslog and dmesg is being filled with errors from systemd. Searching the internet for: systemd-journald "operation not supported", gives no valuable results. Here is a sample of ...
user avatar
  • 1,736
0 votes
1 answer
90 views

when configuring persistent system journals, after restarting systemd-journald /var/log/journal folder didn't create

When configuring persistent system journals, after restarting systemd-journald /var/log/journal folder didn't create. I did following steps: become root edited and saved /etc/systemd/journald.conf ...
user avatar
1 vote
1 answer
156 views

How is journalctl able to add the line with the "-- Reboot --" log message?

I've noticed, on machines where the journalctl logs are saved on disk, that on a reboot, I get a line between the message before and after the reboot happened like so: blah blah blah -- Reboot -- blah ...
user avatar
  • 2,305
1 vote
1 answer
64 views

Can I migrate ubuntu journald logs?

I have an app registered as a service in Ubuntu 16.04 If I type: journalctl -u myapp.service I can see the logs for my app. I am moving my app to a new VM where the same service will be in place. Is ...
user avatar
  • 113
0 votes
0 answers
53 views

Optional 'nofail' mount of partition for /var/log that does not prevent systemd-journal-flush service starting

I tried adding a unit that mount a partition as /var/log, using the nofail option: [Unit] Description=Log Directory (/var/log) [Mount] Where=/var/log What=/dev/disk/by-label/device-logs Type=ext4 ...
user avatar
  • 111
0 votes
1 answer
725 views

How to fix journalctl error logs in Arch Linux

I'm new to Arch Linux,i installed it a month ago, so sorry if this is a stupid question. Today when I booted my computer I saw some errors, so I checked journalctl and a lot of hardware errors and ...
user avatar
0 votes
1 answer
76 views

How do I print into the journal from a systemd environment generator?

I am working on an embedded system. I wrote an environment generator in bash and it seems to work just fine. However I get some errors in the journal: May 28 02:03:14 imx6ull14x14evk systemd[121]: /...
user avatar
  • 153
1 vote
1 answer
211 views

Hundreds of 8MB empty journald archives fill up my hard drive

I have the following /etc/systemd/journald.conf config: [Journal] Storage=persistent #Compress=yes #Seal=yes #SplitMode=uid #SyncIntervalSec=5m #RateLimitIntervalSec=30s #RateLimitBurst=1000 ...
user avatar
  • 1,726
0 votes
0 answers
1k views

Zookeeper systemd service is not running

I have downloaded Kafka under /opt/kafka directory. I have created a user called kafkaadmin and added him to wheel group so that he can run as root user. Now, I have configured the zookeeper as ...
user avatar
  • 135
2 votes
0 answers
174 views

My laptop freeze or has black screen when I open the lid after suspend

Since when I bought this laptop (Huawei Matebook D14, it has a AMD Ryzen 5 3500U CPU with a Radeon Vega 8 GPU) and installed Linux on it (it's dualbooting with Windows), I have this problem that ...
user avatar
  • 211
2 votes
1 answer
62 views

journal files quite big, hidden content?

I'm running Ubuntu 20.04 on a server. Currently my /var/log/journal folder grows rapidly (about 1Gb in a week) and I don't understand why. If I check the logs with journalctl I cannot see any major ...
user avatar
5 votes
1 answer
517 views

What format does syslog() use when writing to /dev/log?

I initially thought to post this to StackOverflow because my interest was primarily from a programming focus, but after reading about the history tag (and the question it linked to), I posted it to ...
user avatar
  • 889
2 votes
1 answer
53 views

What will a boot look like in the systemd journal (journalctl)?

What should I look for in the systemd journal to find when the latest boot happened?
user avatar
2 votes
0 answers
88 views

Can you set a capture filter on journald?

I have a service that runs in the background. It's controlled by systemd. Any output is captured by journald. Most of the time, it has very little output. Sometimes though, it runs into a particular ...
user avatar
  • 193
0 votes
1 answer
1k views

Enhance Journalctl to show /var/log/messages

I am not able to find /var/log/messages under journald. Is there any way I can integrate journald with /var/log/messages such that journalctl shows logs from /var/log/messages?
user avatar
3 votes
1 answer
144 views

Why is this systemd user service with piped output not showing in journald logs

I have the following service: [Unit] Description="Hoping to get rich" [Service] ExecStart='/home/me/Dev/hellogoogle.sh' Restart=on-failure RestartSec=5s [Install] WantedBy=default.target ...
user avatar
  • 904
1 vote
1 answer
2k views

How to detect and clean up junk journal files?

One of our Ubuntu 18.04 hosts was caught with 12 GB of *.journal files, far more than intended. Attempting to find out if they were worth keeping, I ran journalctl --file $f on each file older than ...
user avatar
1 vote
1 answer
98 views

journalctl - clear low priority messages

Is there a way to clear systemd/journal messages manually only keeping high priority messages? I have a system with very limited storage and would like to keep the journal compact while still keeping ...
user avatar
  • 13
0 votes
1 answer
23 views

What kind of network information can be gathered via journald by default?

I'm looking for info like TCP/ACK request, session opened, errors, refused connections etc..
user avatar
  • 13
0 votes
2 answers
121 views

Is there a way to log program specific behavior?

Edited: Since the initial question was too general I will focus on only one program. I am running the command libinput-gestures-setup start, which comes bundled with libinput-gestures and it seems to ...
user avatar
1 vote
0 answers
320 views

Error message starting rsyslog after configuring system logging without journald on RHEL 7

I followed this procedure from Red Hat website https://access.redhat.com/articles/4058681 to configuring system logging without journald but after reboot rsyslog failed to start. edit the /etc/...
user avatar
0 votes
0 answers
124 views

Are there generally any privacy issues with giving out a journalctl output?

As the title states, I'm just wondering if pasting the logs from systemd might have any personally sensitive information, as I know commands like inxi can with internet information. I was under no ...
user avatar
  • 17
1 vote
1 answer
359 views

How to add custom journal field value in a bash systemd unit

I have systemd service that runs a bash file. All the output of this script is logger in the systemd journal, and correctly attributed to the corresponding unit by systemd: # myservice.sh echo "...
user avatar
  • 177
0 votes
1 answer
80 views

Where are the `*.journal` files for a given unit?

I have a systemd service unit for sshd: $ systemctl status sshd * ssh.service - OpenBSD Secure Shell server Loaded: loaded (/lib/systemd/system/ssh.service; enabled; vendor preset: enabled) ...
user avatar
  • 610
0 votes
1 answer
160 views

Can systemd journal trigger actions based on parsed log lines?

Occasionally my laptop doesn't go to sleep when the lid is shut. The reasons for this vary, but it's often due to a driver that is in a bad state. I currently have no way of knowing there's a ...
user avatar
  • 156

1
2 3 4 5