Questions tagged [journalctl]
The journalctl tag has no usage guidance.
50
questions
0
votes
0
answers
13
views
journalctl – Is there any Issue with generating a new Forward Secure Sealing (FSS) Key every 30 Seconds?
Goal
Improve Security of the System by sealing the Journal Logs in a shorter Interval.
What could be Problems?
System Performance?
To Much different files were generated, so that I have to set the ...
- 1
0
votes
0
answers
19
views
How to get user logs of certain group with journalctl?
I can filter the logs of a certain user, with
journalctl | grep "user111"
But I have hundreds of users in dozens of different groups. How to get user logs of certain group with journalctl?
- 101
0
votes
1
answer
38
views
How do I stop journald from dropping blank lines?
I have an application which logs to stdout in a format like this:
incoming request from x.x.x.x
client version is 1.2
authenticated as alice@example.com
processed 1234 bytes
closing connection
...
- 141
1
vote
0
answers
73
views
journalctl does not provide colored output
I'm on Ubuntu 20.04, and journalctl will not provide colored output for my logs. I verified, and those logs do have colored output if not piped through journalctl. I configured my terminal as xterm-...
- 111
0
votes
0
answers
123
views
tomcat service getting logs from catalina.out, localhost.log and system.prints into journalctl
I have 2 servers with tomcat installed, one was installed by someone else. Something i noticed about the old one is when I run journalctl -u tomcat.. It shows most of the logs including when an ...
- 101
0
votes
1
answer
43
views
strange messages in the systemd journal
I'm running systemd version:
systemd 245 (245.4-4ubuntu3.2)
+PAM +AUDIT +SELINUX +IMA +APPARMOR +SMACK +SYSVINIT +UTMP +LIBCRYPTSETUP +GCRYPT +GNUTLS +ACL +XZ +LZ4 +SECCOMP +BLKID +ELFUTILS +KMOD +...
- 101
0
votes
0
answers
782
views
Service not logging to journalctl
I have a user service which is placed under /home/<user>/.config/systemd/user/<service>.service
When I perform systemctl --user status <service> I have the desired output, for ...
- 1
0
votes
1
answer
668
views
Tail the journalctl log on failure to restart systemd service?
I want to know if there is a brief way to check the last 50 lines about a service that threw an error on restart.
$ sudo service nginx restart
Job for nginx.service failed because the control process ...
- 103
0
votes
1
answer
127
views
journalctl stops working randomly after boot on DigitalOcean droplet
I am building servers from a custom image I made using Packer on DigitalOcean, and I'm having a recurring issue where journalctl doesn't have any logs:
# journalctl
No journal files were found.
...
- 298
0
votes
0
answers
99
views
Journalctl -xe only shows results from February 04
The title says it all.
Journalctl -xe worked fine but like a month ago it only showed the results from February 04...
If you need any config file just comment.
Thanks in advance!
/etc/systemd/journald....
- 1
2
votes
0
answers
125
views
How can I ask journalctl to show records for all units except one?
journalctl -u ssh prints all records associated with the ssh unit. But how can I get all records not associated with the ssh unit? Things that don't work: journalctl -u '!ssh'; journalctl '!...
- 427
0
votes
3
answers
221
views
How to view journalctl without rebooting system in RHEL 7/8?
We're having issues with a customer having RedHat 7 PC's shutdown intermittently.
One was just sent in for repair, and I'd like to check the journald output.
However, I've read the rebooting the ...
- 184
0
votes
0
answers
489
views
Make journalctl keep all logs forever (SystemMaxUse = unlimited)
How do I configure journald so that it never, ever, ever deletes my logs.
Yes, what I want to do is tell journald to keep writing until the disk (read: /var partition's filesystem) is full.
No, I don'...
- 435
1
vote
0
answers
255
views
journalctl --list-boots is not listing all boots
I have a Raspberry Pi running a custom Yocto image and it's using systemd-journald for logging.
I'm wondering why there is a difference between:
root@raspberrypi4:~# journalctl -o verbose | grep -e '...
- 113
0
votes
1
answer
412
views
Fedora28 - firewalld stopped working as it unable to communicate with ABRT daemon
We are currently running a Fedora 28 server. Due to the server being restarting multiple times, FirewallD has stopped working. Based on the error messages presented when we run the command systemctl ...
3
votes
0
answers
2k
views
Windows 10 KVM guests cause Ubuntu 20.04 host to crash (revised)
I got extremely confused and decided to re-write the question from scratch, so if some of the comments do not make sense, that is why. Apoplogies to anyone whose time I wasted.
I am having a problem ...
- 243
2
votes
1
answer
380
views
Finding out why service being terminated
Using journalctl -u docker I noticed
May 30 10:01:43 xxx systemd[1]: Stopping Docker Application Container Engine...
...
docker specific error log in between
...
May 30 10:01:51 xxx systemd[1]: ...
- 161
0
votes
1
answer
318
views
How to terminate real time logging after it has been initiated with journalctl -f &
Environment: CentOS 8
I turned on real time logging with the command,
$ journalctl -f &
I got the information I needed but unfortunately I'm not sure how to stop it. [CTRL] -c does not stop it....
- 479
0
votes
1
answer
1k
views
Ubuntu 20.04 container failing to startup in Proxmox
Hello I have created a Ubuntu 20.04 and 18.04 container in Proxmox and both return the same error when I try to start them up after creating the container via the Proxmox GUI.
They fail to start and ...
- 185
1
vote
1
answer
2k
views
Linux journalctl not synced with systemctl status / Journalctl not updating
I am running my custom service, let's call it "foo.service".
It's a gunicorn python process which logs a few things.
I used to be able to get a real-time log overview using journalctl -u <service&...
- 113
1
vote
0
answers
452
views
How does SystemMaxUse on journalctl work?
I'm using journalctl for system logging. I want to have a log file to check what is happening with the process I'm running at anytime.
So I'm configuring the journald.conf file like this:
[Journal]
...
- 111
5
votes
2
answers
18k
views
Journalctl and syslog: How does it actually work? [closed]
I'm having a hard time understanding how logging works on linux.
Since the inclusion of systemd, it seems a bit easier, but I still have a couple of concepts that still can't fully understand.
Given ...
- 183
2
votes
0
answers
135
views
Change logging priority of UFW
As far as I can tell (through journalctl -p 4) UFW logs all blocked connections as warnings. I'd really like to be able to use that log level for things I actually might want to respond to. Is there ...
- 121
1
vote
2
answers
821
views
journalctl --disk-usage shows 106M while journalctl | wc -c shows only 7MB of logs, why?
I have an issue with journalctl, I set it to use 100M maximum in my journald.conf:
[Journal]
Compress=yes
SyncIntervalSec=5m
SystemMaxUse=100M
ForwardToSyslog=no
ForwardToKMsg=no
ForwardToConsole=no
...
- 123
2
votes
1
answer
6k
views
Why there is no journalctl in my centos 6.6 box and how to install/enable it?
I have various environment on CentOS, the hosts on CentOS7+ all come with journalctl command so if I need to view system log I can do so.
However on another box it is CentOS6.6, I get error of the ...
- 135
2
votes
0
answers
410
views
Arch Linux journalctl: how to increase logging size?
I have a web and email server based on Arch Linux.
I have been trying for a long time to keep enough log entries in journal, but unfortunately it doesn't work. I have no problem with other servers.
...
- 158
1
vote
0
answers
414
views
Journalctl seems to be ignoring since and until
I'm trying to get the logs of a problem that's been happening for over a week by this point. I'm trying to use journalctl to print the logs but it doesn't seem to give me anything more or less than ...
- 165
0
votes
1
answer
198
views
How to make journalctl recognize user-defined fields?
Journalctl's manual says:
New fields may freely be defined by applications, but a few fields
have special meaning.
However I don't see a way to actually introduce my own field that journalctl ...
- 135
1
vote
2
answers
2k
views
centOs : system time getting reset back to UTC after changing it using timedatectl
I have a Centos machine with version 7. I am trying to change the system time using the timedatectl command. The time gets changed but after a few seconds it gets reset back to it's original time.
[...
- 141
4
votes
1
answer
1k
views
View auditd logs in journalctl
I'm using CentOS 7. trying to view auditd logs in journalctl
When I try journalctl -u auditd I see the following output:
-- Logs begin at Wed 2018-09-05 08:59:19 EDT, end at Wed 2018-09-19 15:01:01 ...
- 2,767
6
votes
1
answer
12k
views
How to filter journalctl output by process name?
When a process logs to systemd, its process name is recorded and displayed as identifier in the journalctl output.
$ systemd-cat echo "test"
$ journalctl -f
-- Logs begin at Sat 2018-02-24 12:13:24 ...
2
votes
1
answer
1k
views
journalctl only refreshing after restarting systemd service?
I have a systemd service with gunicorn. I have a print statement in a function.Problem is that, journalctl does not show the print output when i call the function but it shows the output after ...
- 121
5
votes
5
answers
14k
views
reliable export of journalctl logs
I search a way for a reliable export of journalctl logs.
I could use the --since=... option, but this is a bit fuzzy.
In my case a script would call journalctl --output=json every ten minutes.
I ...
- 2,904
1
vote
1
answer
1k
views
Volume of Logs created by journalctl/systemd per day?
Is there a way to get the size of logs (in bytes) which journalctl creates per day?
Background: we want to get our logs into a central database.
But before doing this I would like to have rough ...
- 2,904
1
vote
1
answer
743
views
journald: extract part of a system journal into the journald format (i.e. for use with journalctl)
I have a situation where it would be really useful to attach the relevant bits of the system logs to a bug ticket. The system in question uses journald and I rather like using journalctl to inspect ...
- 141
4
votes
2
answers
2k
views
No error message in journactl of custom service
I try to write a custom service file.
Unfortunately I see no output in the journalctl.
Here is my unit file:
root@om:~# cat /etc/systemd/system/ssh-tunnel-foo-de.service
[Unit]
Description=Tunnel ...
- 2,904
8
votes
1
answer
4k
views
View unbuffered log output from journalctl
I have several systemd services defined. They log both to disk and also to the systemd journal, which I can monitor using journalctl -n 0 -fu myservice. However, I notice that the logs that I see ...
- 185
48
votes
2
answers
46k
views
How do view older journalctl logs (after a rotation maybe?)
I am running docker on ubuntu 16.04 and would like to view the logs. However, I am unable to view logs after what I am guessing is some sort of rotation or the logs grow to a certain size.
I have not ...
- 781
39
votes
2
answers
32k
views
How to allow a user to use journalctl to see user-specific systemd service logs?
I am running user-level services in Ubuntu 16.04 LTS. For example, I have my test.service located at ~/.config/systemd/user/test.service.
I was able to run the service by doing
systemctl --user start ...
- 510
22
votes
6
answers
21k
views
journalctl: how to display colors in its output?
The output of journalctl really looks messy without colors. Is it possible to add colors to its output? On my system it seems only important lines are highlighted. Even dmesg can output with color by ...
- 770
7
votes
3
answers
12k
views
systemd-journald Doesn't start at all
After deleting my /var/log/journal by accident, I am unable to recover from the consequences. systemd-journald keeps failing over and over again every time I try to start it. when I run:
$ journalctl ...
- 231
2
votes
1
answer
2k
views
Truncated/missing logs with systemd on Ubuntu 16.04
I am using Ubuntu 16.04 server, have created a basic nodejs script and packaged it in a simple systemd service.
Content of api.service at /lib/systemd/system/api.service:
[Unit]
Description=api
...
- 321
2
votes
3
answers
2k
views
combined local and remote journald logs
I am using journald forwarding using systemd-journal-remote (local site) and systemd-journal-upload (remote site) on centos7 with systemd-219 on both machines.
Local journals are stored in /var/log/...
- 123
28
votes
6
answers
23k
views
Is there a way to make journalctl show logs from "the last time foo.service ran"?
I'm particularly interested in this for looking at the output of oneshot services that run on a timer. The --unit flag is close, but it concatenates all the runs of the service together. The most ...
- 581
12
votes
2
answers
29k
views
systemd's journalctl: how to filter by message?
journalctl looks like a great tool for looking through logs, but I'm stuck on what feels like a simple ask: I want to see all cron messages that contain the phrase update-ipsets.
Of course I can do ...
- 2,557
11
votes
1
answer
3k
views
How to display syslog priority level in systemd's journalctl
journalctl allows me to filter on priority (-p) and color-codes the priority in the output. But is there any way to get it to output the priority directly, as text?
- 213
6
votes
1
answer
17k
views
How can I output logs to a file from the content of a service with systemd
Well, I have a service configured with systemctl. This is the config file:
[Unit]
Description=The description of the service (:
After=network.target
[Service]
ExecStartPre=/bin/echo 'Starting ...
- 193
4
votes
0
answers
331
views
journalctl prints the entire system log when following
[root@utility ~]# uname -rv
2.6.32-042stab093.5 #1 SMP Wed Sep 10 17:39:49 MSK 2014
[root@utility ~]# cat /etc/redhat-release
CentOS Linux release 7.1.1503 (Core)
[root@utility ~]# journalctl --...
- 151
16
votes
2
answers
11k
views
journalctl access for non-root users
The journald documentation says that adding a user to 'systemd-journal' group or 'adm' group allows the user to access system-wide journal.
I'm running the latest CentOS 7 and I seem to have problem ...
- 211
1
vote
0
answers
317
views
unable to query the systemd journal with journalctl
I'm using Red Hat Enterprise Application Platform 6.4.2.GA on following system:
# cat /etc/redhat-release
Red Hat Enterprise Linux Server release 7.1 (Maipo)
# uname -a
Linux X 3.10.0-229.7.2.el7....
- 12.2k