Questions tagged [journalctl]
The journalctl tag has no usage guidance.
44
questions
0
votes
0answers
23 views
Showing journalctl log entries with relative timestamps?
I am using journalctl (from systemd v237) to look at some logs for some systemd logs. By default it shows the timestamp of the log entry on the left, in the email date style.
Is it possible for ...
0
votes
1answer
7 views
journalctl stops working randomly after boot on DigitalOcean droplet
I am building servers from a custom image I made using Packer on DigitalOcean, and I'm having a recurring issue where journalctl doesn't have any logs:
# journalctl
No journal files were found.
...
0
votes
0answers
48 views
Journalctl -xe only shows results from February 04
The title says it all.
Journalctl -xe worked fine but like a month ago it only showed the results from February 04...
If you need any config file just comment.
Thanks in advance!
/etc/systemd/journald....
1
vote
0answers
21 views
How can I ask journalctl to show records for all units except one?
journalctl -u ssh prints all records associated with the ssh unit. But how can I get all records not associated with the ssh unit? Things that don't work: journalctl -u '!ssh'; journalctl '!...
0
votes
3answers
50 views
How to view journalctl without rebooting system in RHEL 7/8?
We're having issues with a customer having RedHat 7 PC's shutdown intermittently.
One was just sent in for repair, and I'd like to check the journald output.
However, I've read the rebooting the ...
0
votes
0answers
76 views
Make journalctl keep all logs forever (SystemMaxUse = unlimited)
How do I configure journald so that it never, ever, ever deletes my logs.
Yes, what I want to do is tell journald to keep writing until the disk (read: /var partition's filesystem) is full.
No, I don'...
0
votes
0answers
76 views
journalctl --list-boots is not listing all boots
I have a Raspberry Pi running a custom Yocto image and it's using systemd-journald for logging.
I'm wondering why there is a difference between:
root@raspberrypi4:~# journalctl -o verbose | grep -e '...
0
votes
0answers
43 views
Missing logs when SystemMaxUse is reached
i'm using journalctl for logging under kernel 4.9.
Now when the SystemMaxUse is reached(currently 16 MB), all new log entries are written to /var/log/journal/../system.journal but are missing after ...
0
votes
1answer
179 views
Fedora28 - firewalld stopped working as it unable to communicate with ABRT daemon
We are currently running a Fedora 28 server. Due to the server being restarting multiple times, FirewallD has stopped working. Based on the error messages presented when we run the command systemctl ...
3
votes
0answers
1k views
Windows 10 KVM guests cause Ubuntu 20.04 host to crash (revised)
I got extremely confused and decided to re-write the question from scratch, so if some of the comments do not make sense, that is why. Apoplogies to anyone whose time I wasted.
I am having a problem ...
2
votes
1answer
180 views
Finding out why service being terminated
Using journalctl -u docker I noticed
May 30 10:01:43 xxx systemd[1]: Stopping Docker Application Container Engine...
...
docker specific error log in between
...
May 30 10:01:51 xxx systemd[1]: ...
0
votes
1answer
96 views
How to terminate real time logging after it has been initiated with journalctl -f &
Environment: CentOS 8
I turned on real time logging with the command,
$ journalctl -f &
I got the information I needed but unfortunately I'm not sure how to stop it. [CTRL] -c does not stop it....
0
votes
1answer
897 views
Ubuntu 20.04 container failing to startup in Proxmox
Hello I have created a Ubuntu 20.04 and 18.04 container in Proxmox and both return the same error when I try to start them up after creating the container via the Proxmox GUI.
They fail to start and ...
1
vote
1answer
847 views
Linux journalctl not synced with systemctl status / Journalctl not updating
I am running my custom service, let's call it "foo.service".
It's a gunicorn python process which logs a few things.
I used to be able to get a real-time log overview using journalctl -u <service&...
1
vote
0answers
321 views
How does SystemMaxUse on journalctl work?
I'm using journalctl for system logging. I want to have a log file to check what is happening with the process I'm running at anytime.
So I'm configuring the journald.conf file like this:
[Journal]
...
5
votes
2answers
10k views
Journalctl and syslog: How does it actually work? [closed]
I'm having a hard time understanding how logging works on linux.
Since the inclusion of systemd, it seems a bit easier, but I still have a couple of concepts that still can't fully understand.
Given ...
2
votes
0answers
92 views
Change logging priority of UFW
As far as I can tell (through journalctl -p 4) UFW logs all blocked connections as warnings. I'd really like to be able to use that log level for things I actually might want to respond to. Is there ...
1
vote
2answers
463 views
journalctl --disk-usage shows 106M while journalctl | wc -c shows only 7MB of logs, why?
I have an issue with journalctl, I set it to use 100M maximum in my journald.conf:
[Journal]
Compress=yes
SyncIntervalSec=5m
SystemMaxUse=100M
ForwardToSyslog=no
ForwardToKMsg=no
ForwardToConsole=no
...
2
votes
1answer
4k views
Why there is no journalctl in my centos 6.6 box and how to install/enable it?
I have various environment on CentOS, the hosts on CentOS7+ all come with journalctl command so if I need to view system log I can do so.
However on another box it is CentOS6.6, I get error of the ...
2
votes
0answers
286 views
Arch Linux journalctl: how to increase logging size?
I have a web and email server based on Arch Linux.
I have been trying for a long time to keep enough log entries in journal, but unfortunately it doesn't work. I have no problem with other servers.
...
1
vote
0answers
252 views
Journalctl seems to be ignoring since and until
I'm trying to get the logs of a problem that's been happening for over a week by this point. I'm trying to use journalctl to print the logs but it doesn't seem to give me anything more or less than ...
0
votes
1answer
132 views
How to make journalctl recognize user-defined fields?
Journalctl's manual says:
New fields may freely be defined by applications, but a few fields
have special meaning.
However I don't see a way to actually introduce my own field that journalctl ...
1
vote
2answers
1k views
centOs : system time getting reset back to UTC after changing it using timedatectl
I have a Centos machine with version 7. I am trying to change the system time using the timedatectl command. The time gets changed but after a few seconds it gets reset back to it's original time.
[...
3
votes
1answer
985 views
View auditd logs in journalctl
I'm using CentOS 7. trying to view auditd logs in journalctl
When I try journalctl -u auditd I see the following output:
-- Logs begin at Wed 2018-09-05 08:59:19 EDT, end at Wed 2018-09-19 15:01:01 ...
5
votes
1answer
7k views
How to filter journalctl output by process name?
When a process logs to systemd, its process name is recorded and displayed as identifier in the journalctl output.
$ systemd-cat echo "test"
$ journalctl -f
-- Logs begin at Sat 2018-02-24 12:13:24 ...
1
vote
1answer
908 views
journalctl only refreshing after restarting systemd service?
I have a systemd service with gunicorn. I have a print statement in a function.Problem is that, journalctl does not show the print output when i call the function but it shows the output after ...
5
votes
5answers
11k views
reliable export of journalctl logs
I search a way for a reliable export of journalctl logs.
I could use the --since=... option, but this is a bit fuzzy.
In my case a script would call journalctl --output=json every ten minutes.
I ...
0
votes
1answer
735 views
Volume of Logs created by journalctl/systemd per day?
Is there a way to get the size of logs (in bytes) which journalctl creates per day?
Background: we want to get our logs into a central database.
But before doing this I would like to have rough ...
1
vote
1answer
473 views
journald: extract part of a system journal into the journald format (i.e. for use with journalctl)
I have a situation where it would be really useful to attach the relevant bits of the system logs to a bug ticket. The system in question uses journald and I rather like using journalctl to inspect ...
4
votes
2answers
2k views
No error message in journactl of custom service
I try to write a custom service file.
Unfortunately I see no output in the journalctl.
Here is my unit file:
root@om:~# cat /etc/systemd/system/ssh-tunnel-foo-de.service
[Unit]
Description=Tunnel ...
7
votes
1answer
3k views
View unbuffered log output from journalctl
I have several systemd services defined. They log both to disk and also to the systemd journal, which I can monitor using journalctl -n 0 -fu myservice. However, I notice that the logs that I see ...
40
votes
2answers
32k views
How do view older journalctl logs (after a rotation maybe?)
I am running docker on ubuntu 16.04 and would like to view the logs. However, I am unable to view logs after what I am guessing is some sort of rotation or the logs grow to a certain size.
I have not ...
29
votes
2answers
21k views
How to allow a user to use journalctl to see user-specific systemd service logs?
I am running user-level services in Ubuntu 16.04 LTS. For example, I have my test.service located at ~/.config/systemd/user/test.service.
I was able to run the service by doing
systemctl --user start ...
14
votes
6answers
16k views
journalctl: how to display colors in its output?
The output of journalctl really looks messy without colors. Is it possible to add colors to its output? On my system it seems only important lines are highlighted. Even dmesg can output with color by ...
7
votes
3answers
9k views
systemd-journald Doesn't start at all
After deleting my /var/log/journal by accident, I am unable to recover from the consequences. systemd-journald keeps failing over and over again every time I try to start it. when I run:
$ journalctl ...
2
votes
1answer
1k views
Truncated/missing logs with systemd on Ubuntu 16.04
I am using Ubuntu 16.04 server, have created a basic nodejs script and packaged it in a simple systemd service.
Content of api.service at /lib/systemd/system/api.service:
[Unit]
Description=api
...
2
votes
2answers
2k views
combined local and remote journald logs
I am using journald forwarding using systemd-journal-remote (local site) and systemd-journal-upload (remote site) on centos7 with systemd-219 on both machines.
Local journals are stored in /var/log/...
20
votes
6answers
18k views
Is there a way to make journalctl show logs from “the last time foo.service ran”?
I'm particularly interested in this for looking at the output of oneshot services that run on a timer. The --unit flag is close, but it concatenates all the runs of the service together. The most ...
9
votes
2answers
17k views
systemd's journalctl: how to filter by message?
journalctl looks like a great tool for looking through logs, but I'm stuck on what feels like a simple ask: I want to see all cron messages that contain the phrase update-ipsets.
Of course I can do ...
8
votes
1answer
2k views
How to display syslog priority level in systemd's journalctl
journalctl allows me to filter on priority (-p) and color-codes the priority in the output. But is there any way to get it to output the priority directly, as text?
6
votes
1answer
15k views
How can I output logs to a file from the content of a service with systemd
Well, I have a service configured with systemctl. This is the config file:
[Unit]
Description=The description of the service (:
After=network.target
[Service]
ExecStartPre=/bin/echo 'Starting ...
4
votes
0answers
261 views
journalctl prints the entire system log when following
[root@utility ~]# uname -rv
2.6.32-042stab093.5 #1 SMP Wed Sep 10 17:39:49 MSK 2014
[root@utility ~]# cat /etc/redhat-release
CentOS Linux release 7.1.1503 (Core)
[root@utility ~]# journalctl --...
15
votes
2answers
8k views
journalctl access for non-root users
The journald documentation says that adding a user to 'systemd-journal' group or 'adm' group allows the user to access system-wide journal.
I'm running the latest CentOS 7 and I seem to have problem ...
0
votes
0answers
259 views
unable to query the systemd journal with journalctl
I'm using Red Hat Enterprise Application Platform 6.4.2.GA on following system:
# cat /etc/redhat-release
Red Hat Enterprise Linux Server release 7.1 (Maipo)
# uname -a
Linux X 3.10.0-229.7.2.el7....
