Questions tagged [systemd-journald]

journald is part of systemd and responsible for collecting system logs

Filter by
Sorted by
Tagged with
3
votes
1answer
880 views

The Systemd Journald use too much memory and don't respect SystemMaxUse and RuntimeMaxUse?

I found the systemd-journald takes like 1GB+ of memory. After some searching I set the value of SystemMaxUse and RuntimeMaxUse both to 8M in "/etc/systemd/journald.conf". Then restart the journald. ...
3
votes
1answer
1k views

Why journalctl does not display log message if I use filtering by unit?

I'm using Ubuntu 16.04 and I am seeing some strange behavior when analyzing journalctl logs. Here's unfiltered output (I used json output to hopefully include all relevant fields): $ journalctl -o ...
3
votes
1answer
631 views

Forward logs from file to journald

I have an application that writes logs to some file e.g. /var/log/mylog.txt However, I want it to be written to journald (so that it can be accessed via journalctl). I can't change way of launching ...
3
votes
1answer
344 views

Can we specify percentage value for RuntimeMaxUse attribute in journald.conf

From man page of Journald.conf I came to know that, by default Journal use 10% of file system size for storing journal files. I have configured below values in journald.conf. RuntimeMaxUse=10 #...
3
votes
0answers
29 views

How to get the current systemd-journald running configuration?

I'd like to get the current configuration of journald, similarly to question How to view systemd's runtime global config? How can I do this? Specifically, I have set some of the available ...
3
votes
0answers
102 views

Customize journald config for a single service

I have a service (systemd unit) that logs very long messages (~700K), which means that the default LineMax setting of 48K doesn't suffice. Setting the LineMax field to 1M in /etc/systemd/journald....
3
votes
0answers
106 views

journalctl log disappear?

Service is still active: systemctl -l status foo.service ● foo.service - My Foo service Loaded: loaded (/etc/systemd/system/foo.service; static; vendor preset: disabled) Active: activating (...
3
votes
0answers
374 views

systemd-journald: Missed 685 kernel messages

At boot and some other times I see missed kernel logs on my system. After that I set Rate limits at jornald.conf but no luck. I still have the issue. Do you have any advice? Kernel: 4.14.19-1-lts ...
3
votes
0answers
3k views

systemd Journal Service takes two hours to start

I have a relatively fresh debian install on which I changed the hostname in /etc/hostname. It gives me the following message during boot: [ 7406.882872] systemd[1]: Starting Journal Service... [ 7406....
3
votes
0answers
169 views

pam_winbind is logging passwords

Occasionally, a systemd unit using a pam module that uses pam_winbind logs a users password. Systemd unit log: Mar 25 15:47:41 display-server node[5969]: pam_succeed_if(grooming:auth): requirement "...
3
votes
1answer
3k views

Is it possible to reduce systemd-journald size stored format (and thus size)?

I'm using systemd on raspberrypi machine with yocto based system. Recently I had some problems with redirecting messages to rsyslog.socket so I decided to get rid of rsyslog completely in favour of of ...
3
votes
0answers
235 views

filter journalctl output, preserve color [duplicate]

I am using journalctl to watch the system by journalctl -f -p 4, but I'd like to grep-out some information. This works: journalctl -f -p 4|grep -v "maximal mount", but grep discards any color info, a ...
3
votes
0answers
597 views

How would I limit users' sudo permissions for journalctl to a specific unit?

I want to provide our users access to journalctl of a specific unit. For e.g., httpd. My initial thought was to specify the command spec like this: /usr/bin/journalctl -u httpd.service * This will ...
3
votes
0answers
1k views

Should I use separate log files or log everything to the journal?

On my personal server I currently have multiple services (web server, mail server, etc) and some of them have their own log files while others log everything to stdout and that gets picked up by the ...
2
votes
2answers
412 views

How can I view journalctl logs by unit and identifier with one command?

I have a vpn service unit for which I can view the logs with... journalctl -u vpn I also have a script that interacts with the vpn manually and is logged to journal with... exec > >(systemd-...
2
votes
2answers
315 views

How does journald know the PID of a process that produces log data?

When I look at journalctl, it tells me the PID and the program name(or service name?) of a log entry. Then I wondered, logs are created by other processes, how do systemd-journald know the PID of ...
2
votes
2answers
384 views

How to get the current _BOOT_ID in journald

How to obtain the current value of _BOOT_ID in systemd-journald? I can do something ugly such like: journalctl -o verbose --since '2016-05-17' | egrep '^[ ]+_BOOT_ID' | tail -n 1| cut -d"=" -f2 Is ...
2
votes
1answer
6k views

How to surpress audit daemon rotating log messages?

On a CentOS 7 system messages like these are logged several times a day: Sep 24 00:11:42 example.org auditd[756]: Audit daemon rotating log files Sep 24 00:26:23 example.org auditd[756]: Audit daemon ...
2
votes
1answer
567 views

How to determine a log's source process spawned from a systemd service?

I have a systemd service which starts multiple 3rd-party processes which output to standard output. Is there anyway to easily determine which logs are from specific process from the system journal? ...
2
votes
2answers
598 views

Store more logs in-memory with systemd-journald

I know systemd-journald keeps its logs in-memory by default. Does anyone know what the limit is for these logs and how to increase it? From the banner at the top it seems like it is only keeping them ...
2
votes
1answer
2k views

Distinguishing levels in journalctl

Can I somehow make journalctl print log levels next to actual messages? I have found the -p option but that is not what I'm looking for, I want to see both errors and warnings but I want to be able ...
2
votes
2answers
292 views

Relation between systemd service names and journald entries

Example [from Ubuntu 17.04] The service is known as network-manager by systemd. $ systemctl list-unit-files | grep network network-manager.service enabled Looking for log ...
2
votes
1answer
980 views

Missing systemd journal log

While reviewing my journal log, I find that only logs for the recent three days are present. There is only 8 lines worth of log from between September 19 and 27: # journalctl --since="2014-09-19" --...
2
votes
0answers
913 views

Why do “journalctl --disk-usage” and “journalctl | wc” not correspond well?

TL;DR how comes that journald stores about 770 MiB while displaying the logs only yields 90MiB of data? #UPDATE# I did a journalctl -a -o verbose which at least yielded some 530MiB, yet less than ...
2
votes
0answers
155 views

Why journalctl outputs in ASCII?

I have a regular Ubuntu 16.04 server VM. My locale is set up to utf-8 everywhere: $ locale LANG=en_US.UTF-8 LANGUAGE= LC_CTYPE="en_US.UTF-8" LC_NUMERIC="en_US.UTF-8" LC_TIME="en_US.UTF-8" LC_COLLATE="...
2
votes
0answers
203 views

flink systemctl faild to start

Hi i want to create systemctl service to tun flink local server . I can run it directly from the /bin/start-local.sh But when im using this service definition . [Unit] Description=Apache Flink ...
2
votes
0answers
1k views

systemd-journald with volatile /var/log (poky)

I'm trying to make my journal persistent. Poky (yocto/krogoth) links /var/log to /var/volatile/log by default. I've already removed this mount in fstab and replaced it with an .mount file: [Unit] ...
2
votes
1answer
998 views

Does journalctl give access to all logs?

In my university we studied about rsyslog, and how it stores logs and where it stores them (/var/log/), and how to configure it ... Now, I learned (by surfing on the internet) that a new way of ...
2
votes
1answer
30 views

Systemd logs only 3 lines of errors

I have an error when running command assert.js:81 throw new assert.AssertionError({ ^ AssertionError: APP_API env var not set at Object.<anonymous> (/opt/offero-html-server/src/routes/...
2
votes
1answer
502 views

How should I manage the logs from my own systemd services?

I have deployed a couple of daemons on ubuntu boxes and wrapped them as systemd services. Their standard output is redirected to the journal by default which is what I was hoping for. Now, it turns ...
2
votes
0answers
683 views

Why is systemd-journald doing some massive disk writes?

For some reason my computer shut down recently. I have also fairly recently done a pacman -Syu to upgrade all the things. However, now systemd-journald is doing a massive amount of disk writes - like ...
2
votes
0answers
339 views

smartd custom logfile on systemd + journald based system

An excerpt from smartd manpage reads: -l FACILITY, --logfacility=FACILITY Uses syslog facility FACILITY to log the messages from smartd. Here FACILITY is one of local0, local1, ..., local7, or ...
1
vote
2answers
103 views

Log all scp transfers with systemd-journald

Does systemd-jurnald log incoming scp connections and what file they copied to what place? I would either like to access these logs or change the config so all of these file transfers are logged.
1
vote
2answers
795 views

Detect if program should log to systemd journal or stdout

I am updating a suite of programs for RHEL7, some c++, some java. If they're started as systemd services I would like them to write to the systemd journal. If they're run directly at the terminal, say ...
1
vote
2answers
3k views

How to read *.journal files in Fedora 21?

I want to see the previous dmesg log before the reboot. In previous versions of fedora, It used to be in /var/log/messages. But from Fedora 20, it's being stored through systemd i.e. journalctl. I've ...
1
vote
1answer
195 views

Journald Storage=persistent - Just disk or RAM & disk

I am trying to understand what journald does in relation to persistent storage of log entries. I have an SDCard setup so I am looking to keep disk writes to a minimum, but would like some persistence ...
1
vote
2answers
855 views

How do I analyze journalctl logs outside of journalctl?

I need to collect some stats from my systemd log files, like how many users pass in a certain query string parameter to my service. I know I can view this information in journalctl but I can't figure ...
1
vote
1answer
524 views

How to install systemd-journal-gatewayd

How do I install systemd-journal-gatewayd on a raspberry pi? https://www.freedesktop.org/software/systemd/man/systemd-journal-gatewayd.service.html stretch michael@stetch:~ $ sudo apt-get install ...
1
vote
1answer
291 views

How do I get xconsole to show the messages on a system with journald?

I would like an old style xconsole on my desktop, ie a terminal which display a scrolling list of syslog message. Does the journald system have a nice desktop app or is there a simple way to get it ...
1
vote
1answer
188 views

Getting systemd service logs faster from my service

I'm having a systemd service defined as follows, that works fine: [Unit] Description=my service After=network.target [Service] User=myuser Group=mygroup WorkingDirectory=/home/myuser/myapp ...
1
vote
1answer
356 views

systemd.service : use pty so force flush of stdout?

I have a service that I want to run under systemd. It is written in perl, where by default output is line buffered if STDOUT is connected to a terminal. (Which seems similar to python) The ...
1
vote
1answer
1k views

Prevent syslogs from being logged under journalctl

I have a simple Python snippet managed by a systemd service which logs to the rsysogd daemon where I've defined a configuration file to put it to a syslog server with a format I've defined. This is ...
1
vote
1answer
2k views

Why `journalctl --list-boots` doesn't match what `uptime` and `who -b` report?

Here's a test script I used: last_reboot=$(last reboot | grep 'still running' | awk '{for (i=5; i<=NF; i++) printf $i FS}' | awk '{for (i=1; i<=NF - 2; i++) printf $i FS}') if [ "$last_reboot" ]...
1
vote
1answer
1k views

Use systemd watchdog support to restart application

I have a simple systemd service unit to restart my python script on unconditional exits so defined Restart=always in the service definition. I just want to absolutely make sure even if the script ...
1
vote
1answer
61 views

Can a UBIFS be set as ACL?

Running Debian Buster on Kernel 4.20.17 with systemd 241: +PAM +AUDIT +SELINUX +IMA +APPARMOR +SMACK +SYSVINIT +UTMP +LIBCRYPTSETUP +GCRYPT +GNUTLS +ACL +XZ +LZ4 +SECCOMP +BLKID +ELFUTILS +KMOD -IDN2 ...
1
vote
1answer
145 views

journald - resent archived logs to logging socket

I have an embedded device that has both systemd and rsyslog. journald is the main mechanism for local logging and rsyslog for remote logging. rsyslog isn't always running and is started only when ...
1
vote
1answer
132 views

How to configure systemd-journald on NixOS?

What is the proper way to configure systemd-journald on NixOS? There seems to be no relevant configuration options. On Ubuntu, for example, I could edit /etc/systemd/journald.conf. Context: I have ...
1
vote
1answer
196 views

Error starting service in Ubuntu 16.04:

I have created a systemd unit file like this: [Unit] Description=Menu Core Prices Update Daemon After=network.target [Service] Environment="APP_CP=/opt/menu/menu-core-price-update" Environment="...
1
vote
2answers
1k views

How to make journald increase logs storage capacity?

I would like to have persistent logs via journald. I created /var/log/journal and reloaded the service. Now logs are saved on the disk. But the log size limit is low. I added /etc/systemd/journald....
1
vote
2answers
4k views

“systemd-journald: Received SIGTERM from PID 1 (systemd)” will cause linux restart?

I find a machine reboot , and find the last log message is : systemd-journald: Received SIGTERM from PID 1 (systemd). Anybody see this problem ? Will this make machine reboot? OS version: rhel7.2 ...