Questions tagged [journalctl]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
0
votes
0answers
23 views

Showing journalctl log entries with relative timestamps?

I am using journalctl (from systemd v237) to look at some logs for some systemd logs. By default it shows the timestamp of the log entry on the left, in the email date style. Is it possible for ...
0
votes
1answer
7 views

journalctl stops working randomly after boot on DigitalOcean droplet

I am building servers from a custom image I made using Packer on DigitalOcean, and I'm having a recurring issue where journalctl doesn't have any logs: # journalctl No journal files were found. ...
0
votes
0answers
48 views

Journalctl -xe only shows results from February 04

The title says it all. Journalctl -xe worked fine but like a month ago it only showed the results from February 04... If you need any config file just comment. Thanks in advance! /etc/systemd/journald....
1
vote
0answers
21 views

How can I ask journalctl to show records for all units except one?

journalctl -u ssh prints all records associated with the ssh unit. But how can I get all records not associated with the ssh unit? Things that don't work: journalctl -u '!ssh'; journalctl '!...
0
votes
3answers
50 views

How to view journalctl without rebooting system in RHEL 7/8?

We're having issues with a customer having RedHat 7 PC's shutdown intermittently. One was just sent in for repair, and I'd like to check the journald output. However, I've read the rebooting the ...
0
votes
0answers
76 views

Make journalctl keep all logs forever (SystemMaxUse = unlimited)

How do I configure journald so that it never, ever, ever deletes my logs. Yes, what I want to do is tell journald to keep writing until the disk (read: /var partition's filesystem) is full. No, I don'...
0
votes
0answers
76 views

journalctl --list-boots is not listing all boots

I have a Raspberry Pi running a custom Yocto image and it's using systemd-journald for logging. I'm wondering why there is a difference between: root@raspberrypi4:~# journalctl -o verbose | grep -e '...
0
votes
0answers
43 views

Missing logs when SystemMaxUse is reached

i'm using journalctl for logging under kernel 4.9. Now when the SystemMaxUse is reached(currently 16 MB), all new log entries are written to /var/log/journal/../system.journal but are missing after ...
0
votes
1answer
179 views

Fedora28 - firewalld stopped working as it unable to communicate with ABRT daemon

We are currently running a Fedora 28 server. Due to the server being restarting multiple times, FirewallD has stopped working. Based on the error messages presented when we run the command systemctl ...
3
votes
0answers
1k views

Windows 10 KVM guests cause Ubuntu 20.04 host to crash (revised)

I got extremely confused and decided to re-write the question from scratch, so if some of the comments do not make sense, that is why. Apoplogies to anyone whose time I wasted. I am having a problem ...
2
votes
1answer
180 views

Finding out why service being terminated

Using journalctl -u docker I noticed May 30 10:01:43 xxx systemd[1]: Stopping Docker Application Container Engine... ... docker specific error log in between ... May 30 10:01:51 xxx systemd[1]: ...
0
votes
1answer
96 views

How to terminate real time logging after it has been initiated with journalctl -f &

Environment: CentOS 8 I turned on real time logging with the command, $ journalctl -f & I got the information I needed but unfortunately I'm not sure how to stop it. [CTRL] -c does not stop it....
0
votes
1answer
897 views

Ubuntu 20.04 container failing to startup in Proxmox

Hello I have created a Ubuntu 20.04 and 18.04 container in Proxmox and both return the same error when I try to start them up after creating the container via the Proxmox GUI. They fail to start and ...
1
vote
1answer
847 views

Linux journalctl not synced with systemctl status / Journalctl not updating

I am running my custom service, let's call it "foo.service". It's a gunicorn python process which logs a few things. I used to be able to get a real-time log overview using journalctl -u <service&...
1
vote
0answers
321 views

How does SystemMaxUse on journalctl work?

I'm using journalctl for system logging. I want to have a log file to check what is happening with the process I'm running at anytime. So I'm configuring the journald.conf file like this: [Journal] ...
5
votes
2answers
10k views

Journalctl and syslog: How does it actually work? [closed]

I'm having a hard time understanding how logging works on linux. Since the inclusion of systemd, it seems a bit easier, but I still have a couple of concepts that still can't fully understand. Given ...
2
votes
0answers
92 views

Change logging priority of UFW

As far as I can tell (through journalctl -p 4) UFW logs all blocked connections as warnings. I'd really like to be able to use that log level for things I actually might want to respond to. Is there ...
1
vote
2answers
463 views

journalctl --disk-usage shows 106M while journalctl | wc -c shows only 7MB of logs, why?

I have an issue with journalctl, I set it to use 100M maximum in my journald.conf: [Journal] Compress=yes SyncIntervalSec=5m SystemMaxUse=100M ForwardToSyslog=no ForwardToKMsg=no ForwardToConsole=no ...
2
votes
1answer
4k views

Why there is no journalctl in my centos 6.6 box and how to install/enable it?

I have various environment on CentOS, the hosts on CentOS7+ all come with journalctl command so if I need to view system log I can do so. However on another box it is CentOS6.6, I get error of the ...
2
votes
0answers
286 views

Arch Linux journalctl: how to increase logging size?

I have a web and email server based on Arch Linux. I have been trying for a long time to keep enough log entries in journal, but unfortunately it doesn't work. I have no problem with other servers. ...
1
vote
0answers
252 views

Journalctl seems to be ignoring since and until

I'm trying to get the logs of a problem that's been happening for over a week by this point. I'm trying to use journalctl to print the logs but it doesn't seem to give me anything more or less than ...
0
votes
1answer
132 views

How to make journalctl recognize user-defined fields?

Journalctl's manual says: New fields may freely be defined by applications, but a few fields have special meaning. However I don't see a way to actually introduce my own field that journalctl ...
1
vote
2answers
1k views

centOs : system time getting reset back to UTC after changing it using timedatectl

I have a Centos machine with version 7. I am trying to change the system time using the timedatectl command. The time gets changed but after a few seconds it gets reset back to it's original time. [...
3
votes
1answer
985 views

View auditd logs in journalctl

I'm using CentOS 7. trying to view auditd logs in journalctl When I try journalctl -u auditd I see the following output: -- Logs begin at Wed 2018-09-05 08:59:19 EDT, end at Wed 2018-09-19 15:01:01 ...
5
votes
1answer
7k views

How to filter journalctl output by process name?

When a process logs to systemd, its process name is recorded and displayed as identifier in the journalctl output. $ systemd-cat echo "test" $ journalctl -f -- Logs begin at Sat 2018-02-24 12:13:24 ...
1
vote
1answer
908 views

journalctl only refreshing after restarting systemd service?

I have a systemd service with gunicorn. I have a print statement in a function.Problem is that, journalctl does not show the print output when i call the function but it shows the output after ...
5
votes
5answers
11k views

reliable export of journalctl logs

I search a way for a reliable export of journalctl logs. I could use the --since=... option, but this is a bit fuzzy. In my case a script would call journalctl --output=json every ten minutes. I ...
0
votes
1answer
735 views

Volume of Logs created by journalctl/systemd per day?

Is there a way to get the size of logs (in bytes) which journalctl creates per day? Background: we want to get our logs into a central database. But before doing this I would like to have rough ...
1
vote
1answer
473 views

journald: extract part of a system journal into the journald format (i.e. for use with journalctl)

I have a situation where it would be really useful to attach the relevant bits of the system logs to a bug ticket. The system in question uses journald and I rather like using journalctl to inspect ...
4
votes
2answers
2k views

No error message in journactl of custom service

I try to write a custom service file. Unfortunately I see no output in the journalctl. Here is my unit file: root@om:~# cat /etc/systemd/system/ssh-tunnel-foo-de.service [Unit] Description=Tunnel ...
7
votes
1answer
3k views

View unbuffered log output from journalctl

I have several systemd services defined. They log both to disk and also to the systemd journal, which I can monitor using journalctl -n 0 -fu myservice. However, I notice that the logs that I see ...
40
votes
2answers
32k views

How do view older journalctl logs (after a rotation maybe?)

I am running docker on ubuntu 16.04 and would like to view the logs. However, I am unable to view logs after what I am guessing is some sort of rotation or the logs grow to a certain size. I have not ...
29
votes
2answers
21k views

How to allow a user to use journalctl to see user-specific systemd service logs?

I am running user-level services in Ubuntu 16.04 LTS. For example, I have my test.service located at ~/.config/systemd/user/test.service. I was able to run the service by doing systemctl --user start ...
14
votes
6answers
16k views

journalctl: how to display colors in its output?

The output of journalctl really looks messy without colors. Is it possible to add colors to its output? On my system it seems only important lines are highlighted. Even dmesg can output with color by ...
7
votes
3answers
9k views

systemd-journald Doesn't start at all

After deleting my /var/log/journal by accident, I am unable to recover from the consequences. systemd-journald keeps failing over and over again every time I try to start it. when I run: $ journalctl ...
2
votes
1answer
1k views

Truncated/missing logs with systemd on Ubuntu 16.04

I am using Ubuntu 16.04 server, have created a basic nodejs script and packaged it in a simple systemd service. Content of api.service at /lib/systemd/system/api.service: [Unit] Description=api ...
2
votes
2answers
2k views

combined local and remote journald logs

I am using journald forwarding using systemd-journal-remote (local site) and systemd-journal-upload (remote site) on centos7 with systemd-219 on both machines. Local journals are stored in /var/log/...
20
votes
6answers
18k views

Is there a way to make journalctl show logs from “the last time foo.service ran”?

I'm particularly interested in this for looking at the output of oneshot services that run on a timer. The --unit flag is close, but it concatenates all the runs of the service together. The most ...
9
votes
2answers
17k views

systemd's journalctl: how to filter by message?

journalctl looks like a great tool for looking through logs, but I'm stuck on what feels like a simple ask: I want to see all cron messages that contain the phrase update-ipsets. Of course I can do ...
8
votes
1answer
2k views

How to display syslog priority level in systemd's journalctl

journalctl allows me to filter on priority (-p) and color-codes the priority in the output. But is there any way to get it to output the priority directly, as text?
6
votes
1answer
15k views

How can I output logs to a file from the content of a service with systemd

Well, I have a service configured with systemctl. This is the config file: [Unit] Description=The description of the service (: After=network.target [Service] ExecStartPre=/bin/echo 'Starting ...
4
votes
0answers
261 views

journalctl prints the entire system log when following

[root@utility ~]# uname -rv 2.6.32-042stab093.5 #1 SMP Wed Sep 10 17:39:49 MSK 2014 [root@utility ~]# cat /etc/redhat-release CentOS Linux release 7.1.1503 (Core) [root@utility ~]# journalctl --...
15
votes
2answers
8k views

journalctl access for non-root users

The journald documentation says that adding a user to 'systemd-journal' group or 'adm' group allows the user to access system-wide journal. I'm running the latest CentOS 7 and I seem to have problem ...
0
votes
0answers
259 views

unable to query the systemd journal with journalctl

I'm using Red Hat Enterprise Application Platform 6.4.2.GA on following system: # cat /etc/redhat-release Red Hat Enterprise Linux Server release 7.1 (Maipo) # uname -a Linux X 3.10.0-229.7.2.el7....