Questions tagged [journalctl]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
0 votes
0 answers
227 views

Firmware ath10k_pci Causes Errors

A few months ago I started using Debian SID. Whenever I start my system I see with journalctl -p 3 -xb: pcieport 0000:00:1c.5: AER: Error of this Agent is reported first ath10k_pci 0000:02:00.0: ...
rhuanpk's user avatar
  • 101
0 votes
1 answer
95 views

How can I monitor journald to invoke a program on a condition?

Before I reinvent the wheel and start scripting, is there a simple way (or existing tool) that can watch the systemd journal and take actions when certain log entries or conditions are detected? ...
Nick's user avatar
  • 4,656
0 votes
2 answers
142 views

Why doesn't cron run the commands in another user's crontab?

Hello everyone and thank you in advance. I have written a job in the mysql user crontab, but it doesn't run at all. I think my code is correct, because it works properly if I execute it pointing to a ...
Centaro's user avatar
  • 19
0 votes
1 answer
606 views

I don't see SSH disconnect events with `journalctl -u sshd`

I want to monitor SSH sessions, including login and logout events. When I run journalctl without any flags, I see both login events like: Accepted publickey for root from 192.168.1.24 port 56464 and ...
Pavel Anni's user avatar
1 vote
1 answer
703 views

Systemd service not logging

I have a systemd service. No logs appear from it despite my best efforts. This is the service file: [Unit] Description=Load Balancer [Service] WorkingDirectory=/home/lb ExecStart=/usr/lib/jvm/jdk-20/...
jurgen's user avatar
  • 111
0 votes
2 answers
985 views

How to debug Linux server reboots?

I have a Debian 10 server that keeps rebooting. journalctl offers possibility to list last boots: journalctl --list-boots -6 1ee519dc5bc24e88af75cc609ee32093 Mon 2023-02-06 21:02:02 UTC—Sun 2023-02-12 ...
Tombart's user avatar
  • 2,173
0 votes
1 answer
319 views

How do I stop journald from dropping blank lines?

I have an application which logs to stdout in a format like this: incoming request from x.x.x.x client version is 1.2 authenticated as [email protected] processed 1234 bytes closing connection ...
9072997's user avatar
  • 211
3 votes
1 answer
765 views

journalctl does not provide colored output [duplicate]

I'm on Ubuntu 20.04, and journalctl will not provide colored output for my logs. I verified, and those logs do have colored output if not piped through journalctl. I configured my terminal as xterm-...
PSS's user avatar
  • 131
0 votes
1 answer
46 views

strange messages in the systemd journal

I'm running systemd version: systemd 245 (245.4-4ubuntu3.2) +PAM +AUDIT +SELINUX +IMA +APPARMOR +SMACK +SYSVINIT +UTMP +LIBCRYPTSETUP +GCRYPT +GNUTLS +ACL +XZ +LZ4 +SECCOMP +BLKID +ELFUTILS +KMOD +...
ilya1725's user avatar
  • 221
2 votes
0 answers
6k views

Service not logging to journalctl

I have a user service which is placed under /home/<user>/.config/systemd/user/<service>.service When I perform systemctl --user status <service> I have the desired output, for ...
Daniel's user avatar
  • 21
0 votes
1 answer
5k views

Tail the journalctl log on failure to restart systemd service?

I want to know if there is a brief way to check the last 50 lines about a service that threw an error on restart. $ sudo service nginx restart Job for nginx.service failed because the control process ...
listenlight's user avatar
0 votes
1 answer
484 views

journalctl stops working randomly after boot on DigitalOcean droplet

I am building servers from a custom image I made using Packer on DigitalOcean, and I'm having a recurring issue where journalctl doesn't have any logs: # journalctl No journal files were found. ...
ZoFreX's user avatar
  • 308
0 votes
0 answers
405 views

Journalctl -xe only shows results from February 04

The title says it all. Journalctl -xe worked fine but like a month ago it only showed the results from February 04... If you need any config file just comment. Thanks in advance! /etc/systemd/journald....
niliak's user avatar
  • 1
5 votes
0 answers
857 views

How can I ask journalctl to show records for all units except one?

journalctl -u ssh prints all records associated with the ssh unit. But how can I get all records not associated with the ssh unit? Things that don't work: journalctl -u '!ssh'; journalctl '!...
smammy's user avatar
  • 452
1 vote
3 answers
805 views

How to view journalctl without rebooting system in RHEL 7/8?

We're having issues with a customer having RedHat 7 PC's shutdown intermittently. One was just sent in for repair, and I'd like to check the journald output. However, I've read the rebooting the ...
Jack BeNimble's user avatar
0 votes
0 answers
1k views

Make journalctl keep all logs forever (SystemMaxUse = unlimited)

How do I configure journald so that it never, ever, ever deletes my logs. Yes, what I want to do is tell journald to keep writing until the disk (read: /var partition's filesystem) is full. No, I don'...
Michael Altfield's user avatar
2 votes
1 answer
1k views

journalctl --list-boots is not listing all boots

I have a Raspberry Pi running a custom Yocto image and it's using systemd-journald for logging. I'm wondering why there is a difference between: root@raspberrypi4:~# journalctl -o verbose | grep -e '...
evading's user avatar
  • 123
0 votes
1 answer
649 views

Fedora28 - firewalld stopped working as it unable to communicate with ABRT daemon

We are currently running a Fedora 28 server. Due to the server being restarting multiple times, FirewallD has stopped working. Based on the error messages presented when we run the command systemctl ...
Ashish Prajapati's user avatar
3 votes
0 answers
2k views

Windows 10 KVM guests cause Ubuntu 20.04 host to crash (revised)

I got extremely confused and decided to re-write the question from scratch, so if some of the comments do not make sense, that is why. Apoplogies to anyone whose time I wasted. I am having a problem ...
Stonecraft's user avatar
2 votes
1 answer
933 views

Finding out why service being terminated

Using journalctl -u docker I noticed May 30 10:01:43 xxx systemd[1]: Stopping Docker Application Container Engine... ... docker specific error log in between ... May 30 10:01:51 xxx systemd[1]: ...
kAldown's user avatar
  • 161
0 votes
1 answer
1k views

How to terminate real time logging after it has been initiated with journalctl -f &

Environment: CentOS 8 I turned on real time logging with the command, $ journalctl -f & I got the information I needed but unfortunately I'm not sure how to stop it. [CTRL] -c does not stop it....
myNewAccount's user avatar
0 votes
1 answer
2k views

Ubuntu 20.04 container failing to startup in Proxmox

Hello I have created a Ubuntu 20.04 and 18.04 container in Proxmox and both return the same error when I try to start them up after creating the container via the Proxmox GUI. They fail to start and ...
ComputerLocus's user avatar
1 vote
1 answer
4k views

Linux journalctl not synced with systemctl status / Journalctl not updating

I am running my custom service, let's call it "foo.service". It's a gunicorn python process which logs a few things. I used to be able to get a real-time log overview using journalctl -u <service&...
Dubb's user avatar
  • 113
2 votes
1 answer
1k views

How does SystemMaxUse on journalctl work?

I'm using journalctl for system logging. I want to have a log file to check what is happening with the process I'm running at anytime. So I'm configuring the journald.conf file like this: [Journal] ...
carlosabcs's user avatar
9 votes
2 answers
28k views

Can Journalctl and syslog be used in paralled?

I'm having a hard time understanding how logging works on linux. Since the inclusion of systemd, it seems a bit easier, but I still have a couple of concepts that still can't fully understand. Given ...
RedNano's user avatar
  • 343
2 votes
0 answers
268 views

Change logging priority of UFW

As far as I can tell (through journalctl -p 4) UFW logs all blocked connections as warnings. I'd really like to be able to use that log level for things I actually might want to respond to. Is there ...
Thom's user avatar
  • 121
1 vote
2 answers
1k views

journalctl --disk-usage shows 106M while journalctl | wc -c shows only 7MB of logs, why?

I have an issue with journalctl, I set it to use 100M maximum in my journald.conf: [Journal] Compress=yes SyncIntervalSec=5m SystemMaxUse=100M ForwardToSyslog=no ForwardToKMsg=no ForwardToConsole=no ...
Roman Gaufman's user avatar
3 votes
1 answer
9k views

Why there is no journalctl in my centos 6.6 box and how to install/enable it?

I have various environment on CentOS, the hosts on CentOS7+ all come with journalctl command so if I need to view system log I can do so. However on another box it is CentOS6.6, I get error of the ...
mdivk's user avatar
  • 145
2 votes
0 answers
697 views

Arch Linux journalctl: how to increase logging size?

I have a web and email server based on Arch Linux. I have been trying for a long time to keep enough log entries in journal, but unfortunately it doesn't work. I have no problem with other servers. ...
Laszlo Malina's user avatar
2 votes
0 answers
699 views

Journalctl seems to be ignoring since and until

I'm trying to get the logs of a problem that's been happening for over a week by this point. I'm trying to use journalctl to print the logs but it doesn't seem to give me anything more or less than ...
Thomas's user avatar
  • 225
0 votes
1 answer
374 views

How to make journalctl recognize user-defined fields?

Journalctl's manual says: New fields may freely be defined by applications, but a few fields have special meaning. However I don't see a way to actually introduce my own field that journalctl ...
Alex's user avatar
  • 145
1 vote
2 answers
3k views

centOs : system time getting reset back to UTC after changing it using timedatectl

I have a Centos machine with version 7. I am trying to change the system time using the timedatectl command. The time gets changed but after a few seconds it gets reset back to it's original time. [...
user1851006's user avatar
4 votes
1 answer
3k views

View auditd logs in journalctl

I'm using CentOS 7. trying to view auditd logs in journalctl When I try journalctl -u auditd I see the following output: -- Logs begin at Wed 2018-09-05 08:59:19 EDT, end at Wed 2018-09-19 15:01:01 ...
kenlukas's user avatar
  • 3,196
10 votes
1 answer
23k views

How to filter journalctl output by process name?

When a process logs to systemd, its process name is recorded and displayed as identifier in the journalctl output. $ systemd-cat echo "test" $ journalctl -f -- Logs begin at Sat 2018-02-24 12:13:24 ...
Merlijn Sebrechts's user avatar
2 votes
1 answer
2k views

journalctl only refreshing after restarting systemd service?

I have a systemd service with gunicorn. I have a print statement in a function.Problem is that, journalctl does not show the print output when i call the function but it shows the output after ...
r4v1's user avatar
  • 121
5 votes
5 answers
16k views

reliable export of journalctl logs

I search a way for a reliable export of journalctl logs. I could use the --since=... option, but this is a bit fuzzy. In my case a script would call journalctl --output=json every ten minutes. I ...
guettli's user avatar
  • 3,773
1 vote
1 answer
2k views

Volume of Logs created by journalctl/systemd per day?

Is there a way to get the size of logs (in bytes) which journalctl creates per day? Background: we want to get our logs into a central database. But before doing this I would like to have rough ...
guettli's user avatar
  • 3,773
1 vote
1 answer
1k views

journald: extract part of a system journal into the journald format (i.e. for use with journalctl)

I have a situation where it would be really useful to attach the relevant bits of the system logs to a bug ticket. The system in question uses journald and I rather like using journalctl to inspect ...
Magnus's user avatar
  • 141
4 votes
2 answers
3k views

No error message in journactl of custom service

I try to write a custom service file. Unfortunately I see no output in the journalctl. Here is my unit file: root@om:~# cat /etc/systemd/system/ssh-tunnel-foo-de.service [Unit] Description=Tunnel ...
guettli's user avatar
  • 3,773
9 votes
1 answer
5k views

View unbuffered log output from journalctl

I have several systemd services defined. They log both to disk and also to the systemd journal, which I can monitor using journalctl -n 0 -fu myservice. However, I notice that the logs that I see ...
amoe's user avatar
  • 195
59 votes
2 answers
71k views

How do view older journalctl logs (after a rotation maybe?)

I am running docker on ubuntu 16.04 and would like to view the logs. However, I am unable to view logs after what I am guessing is some sort of rotation or the logs grow to a certain size. I have not ...
jdf's user avatar
  • 951
51 votes
5 answers
52k views

How to allow a user to use journalctl to see user-specific systemd service logs?

I am running user-level services in Ubuntu 16.04 LTS. For example, I have my test.service located at ~/.config/systemd/user/test.service. I was able to run the service by doing systemctl --user start ...
ChromeHearts's user avatar
33 votes
6 answers
30k views

journalctl: how to display colors in its output?

The output of journalctl really looks messy without colors. Is it possible to add colors to its output? On my system it seems only important lines are highlighted. Even dmesg can output with color by ...
xuhdev's user avatar
  • 930
7 votes
3 answers
14k views

systemd-journald Doesn't start at all

After deleting my /var/log/journal by accident, I am unable to recover from the consequences. systemd-journald keeps failing over and over again every time I try to start it. when I run: $ journalctl ...
lyoko the's user avatar
  • 241
2 votes
1 answer
2k views

Truncated/missing logs with systemd on Ubuntu 16.04

I am using Ubuntu 16.04 server, have created a basic nodejs script and packaged it in a simple systemd service. Content of api.service at /lib/systemd/system/api.service: [Unit] Description=api ...
quentinadam's user avatar
2 votes
3 answers
3k views

combined local and remote journald logs

I am using journald forwarding using systemd-journal-remote (local site) and systemd-journal-upload (remote site) on centos7 with systemd-219 on both machines. Local journals are stored in /var/log/...
resi's user avatar
  • 123
40 votes
6 answers
33k views

Is there a way to make journalctl show logs from "the last time foo.service ran"?

I'm particularly interested in this for looking at the output of oneshot services that run on a timer. The --unit flag is close, but it concatenates all the runs of the service together. The most ...
Jack O'Connor's user avatar
16 votes
3 answers
54k views

systemd's journalctl: how to filter by message?

journalctl looks like a great tool for looking through logs, but I'm stuck on what feels like a simple ask: I want to see all cron messages that contain the phrase update-ipsets. Of course I can do ...
artfulrobot's user avatar
  • 3,079
14 votes
2 answers
4k views

How to display syslog priority level in systemd's journalctl

journalctl allows me to filter on priority (-p) and color-codes the priority in the output. But is there any way to get it to output the priority directly, as text?
Avi Kivity's user avatar
7 votes
1 answer
20k views

How can I output logs to a file from the content of a service with systemd

Well, I have a service configured with systemctl. This is the config file: [Unit] Description=The description of the service (: After=network.target [Service] ExecStartPre=/bin/echo 'Starting ...
robe007's user avatar
  • 223