Questions tagged [journalctl]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
0 votes
0 answers
13 views

journalctl – Is there any Issue with generating a new Forward Secure Sealing (FSS) Key every 30 Seconds?

Goal Improve Security of the System by sealing the Journal Logs in a shorter Interval. What could be Problems? System Performance? To Much different files were generated, so that I have to set the ...
user avatar
0 votes
0 answers
19 views

How to get user logs of certain group with journalctl?

I can filter the logs of a certain user, with journalctl | grep "user111" But I have hundreds of users in dozens of different groups. How to get user logs of certain group with journalctl?
user avatar
0 votes
1 answer
38 views

How do I stop journald from dropping blank lines?

I have an application which logs to stdout in a format like this: incoming request from x.x.x.x client version is 1.2 authenticated as alice@example.com processed 1234 bytes closing connection ...
user avatar
  • 141
1 vote
0 answers
73 views

journalctl does not provide colored output

I'm on Ubuntu 20.04, and journalctl will not provide colored output for my logs. I verified, and those logs do have colored output if not piped through journalctl. I configured my terminal as xterm-...
user avatar
  • 111
0 votes
0 answers
123 views

tomcat service getting logs from catalina.out, localhost.log and system.prints into journalctl

I have 2 servers with tomcat installed, one was installed by someone else. Something i noticed about the old one is when I run journalctl -u tomcat.. It shows most of the logs including when an ...
user avatar
0 votes
1 answer
43 views

strange messages in the systemd journal

I'm running systemd version: systemd 245 (245.4-4ubuntu3.2) +PAM +AUDIT +SELINUX +IMA +APPARMOR +SMACK +SYSVINIT +UTMP +LIBCRYPTSETUP +GCRYPT +GNUTLS +ACL +XZ +LZ4 +SECCOMP +BLKID +ELFUTILS +KMOD +...
user avatar
  • 101
0 votes
0 answers
782 views

Service not logging to journalctl

I have a user service which is placed under /home/<user>/.config/systemd/user/<service>.service When I perform systemctl --user status <service> I have the desired output, for ...
user avatar
  • 1
0 votes
1 answer
668 views

Tail the journalctl log on failure to restart systemd service?

I want to know if there is a brief way to check the last 50 lines about a service that threw an error on restart. $ sudo service nginx restart Job for nginx.service failed because the control process ...
user avatar
  • 103
0 votes
1 answer
127 views

journalctl stops working randomly after boot on DigitalOcean droplet

I am building servers from a custom image I made using Packer on DigitalOcean, and I'm having a recurring issue where journalctl doesn't have any logs: # journalctl No journal files were found. ...
user avatar
  • 298
0 votes
0 answers
99 views

Journalctl -xe only shows results from February 04

The title says it all. Journalctl -xe worked fine but like a month ago it only showed the results from February 04... If you need any config file just comment. Thanks in advance! /etc/systemd/journald....
user avatar
  • 1
2 votes
0 answers
125 views

How can I ask journalctl to show records for all units except one?

journalctl -u ssh prints all records associated with the ssh unit. But how can I get all records not associated with the ssh unit? Things that don't work: journalctl -u '!ssh'; journalctl '!...
user avatar
  • 427
0 votes
3 answers
221 views

How to view journalctl without rebooting system in RHEL 7/8?

We're having issues with a customer having RedHat 7 PC's shutdown intermittently. One was just sent in for repair, and I'd like to check the journald output. However, I've read the rebooting the ...
user avatar
0 votes
0 answers
489 views

Make journalctl keep all logs forever (SystemMaxUse = unlimited)

How do I configure journald so that it never, ever, ever deletes my logs. Yes, what I want to do is tell journald to keep writing until the disk (read: /var partition's filesystem) is full. No, I don'...
user avatar
1 vote
0 answers
255 views

journalctl --list-boots is not listing all boots

I have a Raspberry Pi running a custom Yocto image and it's using systemd-journald for logging. I'm wondering why there is a difference between: root@raspberrypi4:~# journalctl -o verbose | grep -e '...
user avatar
  • 113
0 votes
1 answer
412 views

Fedora28 - firewalld stopped working as it unable to communicate with ABRT daemon

We are currently running a Fedora 28 server. Due to the server being restarting multiple times, FirewallD has stopped working. Based on the error messages presented when we run the command systemctl ...
user avatar
3 votes
0 answers
2k views

Windows 10 KVM guests cause Ubuntu 20.04 host to crash (revised)

I got extremely confused and decided to re-write the question from scratch, so if some of the comments do not make sense, that is why. Apoplogies to anyone whose time I wasted. I am having a problem ...
user avatar
2 votes
1 answer
380 views

Finding out why service being terminated

Using journalctl -u docker I noticed May 30 10:01:43 xxx systemd[1]: Stopping Docker Application Container Engine... ... docker specific error log in between ... May 30 10:01:51 xxx systemd[1]: ...
user avatar
  • 161
0 votes
1 answer
318 views

How to terminate real time logging after it has been initiated with journalctl -f &

Environment: CentOS 8 I turned on real time logging with the command, $ journalctl -f & I got the information I needed but unfortunately I'm not sure how to stop it. [CTRL] -c does not stop it....
user avatar
0 votes
1 answer
1k views

Ubuntu 20.04 container failing to startup in Proxmox

Hello I have created a Ubuntu 20.04 and 18.04 container in Proxmox and both return the same error when I try to start them up after creating the container via the Proxmox GUI. They fail to start and ...
user avatar
1 vote
1 answer
2k views

Linux journalctl not synced with systemctl status / Journalctl not updating

I am running my custom service, let's call it "foo.service". It's a gunicorn python process which logs a few things. I used to be able to get a real-time log overview using journalctl -u <service&...
user avatar
  • 113
1 vote
0 answers
452 views

How does SystemMaxUse on journalctl work?

I'm using journalctl for system logging. I want to have a log file to check what is happening with the process I'm running at anytime. So I'm configuring the journald.conf file like this: [Journal] ...
user avatar
5 votes
2 answers
18k views

Journalctl and syslog: How does it actually work? [closed]

I'm having a hard time understanding how logging works on linux. Since the inclusion of systemd, it seems a bit easier, but I still have a couple of concepts that still can't fully understand. Given ...
user avatar
  • 183
2 votes
0 answers
135 views

Change logging priority of UFW

As far as I can tell (through journalctl -p 4) UFW logs all blocked connections as warnings. I'd really like to be able to use that log level for things I actually might want to respond to. Is there ...
user avatar
  • 121
1 vote
2 answers
821 views

journalctl --disk-usage shows 106M while journalctl | wc -c shows only 7MB of logs, why?

I have an issue with journalctl, I set it to use 100M maximum in my journald.conf: [Journal] Compress=yes SyncIntervalSec=5m SystemMaxUse=100M ForwardToSyslog=no ForwardToKMsg=no ForwardToConsole=no ...
user avatar
2 votes
1 answer
6k views

Why there is no journalctl in my centos 6.6 box and how to install/enable it?

I have various environment on CentOS, the hosts on CentOS7+ all come with journalctl command so if I need to view system log I can do so. However on another box it is CentOS6.6, I get error of the ...
user avatar
  • 135
2 votes
0 answers
410 views

Arch Linux journalctl: how to increase logging size?

I have a web and email server based on Arch Linux. I have been trying for a long time to keep enough log entries in journal, but unfortunately it doesn't work. I have no problem with other servers. ...
user avatar
1 vote
0 answers
414 views

Journalctl seems to be ignoring since and until

I'm trying to get the logs of a problem that's been happening for over a week by this point. I'm trying to use journalctl to print the logs but it doesn't seem to give me anything more or less than ...
user avatar
  • 165
0 votes
1 answer
198 views

How to make journalctl recognize user-defined fields?

Journalctl's manual says: New fields may freely be defined by applications, but a few fields have special meaning. However I don't see a way to actually introduce my own field that journalctl ...
user avatar
  • 135
1 vote
2 answers
2k views

centOs : system time getting reset back to UTC after changing it using timedatectl

I have a Centos machine with version 7. I am trying to change the system time using the timedatectl command. The time gets changed but after a few seconds it gets reset back to it's original time. [...
user avatar
4 votes
1 answer
1k views

View auditd logs in journalctl

I'm using CentOS 7. trying to view auditd logs in journalctl When I try journalctl -u auditd I see the following output: -- Logs begin at Wed 2018-09-05 08:59:19 EDT, end at Wed 2018-09-19 15:01:01 ...
user avatar
  • 2,767
6 votes
1 answer
12k views

How to filter journalctl output by process name?

When a process logs to systemd, its process name is recorded and displayed as identifier in the journalctl output. $ systemd-cat echo "test" $ journalctl -f -- Logs begin at Sat 2018-02-24 12:13:24 ...
user avatar
2 votes
1 answer
1k views

journalctl only refreshing after restarting systemd service?

I have a systemd service with gunicorn. I have a print statement in a function.Problem is that, journalctl does not show the print output when i call the function but it shows the output after ...
user avatar
  • 121
5 votes
5 answers
14k views

reliable export of journalctl logs

I search a way for a reliable export of journalctl logs. I could use the --since=... option, but this is a bit fuzzy. In my case a script would call journalctl --output=json every ten minutes. I ...
user avatar
  • 2,904
1 vote
1 answer
1k views

Volume of Logs created by journalctl/systemd per day?

Is there a way to get the size of logs (in bytes) which journalctl creates per day? Background: we want to get our logs into a central database. But before doing this I would like to have rough ...
user avatar
  • 2,904
1 vote
1 answer
743 views

journald: extract part of a system journal into the journald format (i.e. for use with journalctl)

I have a situation where it would be really useful to attach the relevant bits of the system logs to a bug ticket. The system in question uses journald and I rather like using journalctl to inspect ...
user avatar
  • 141
4 votes
2 answers
2k views

No error message in journactl of custom service

I try to write a custom service file. Unfortunately I see no output in the journalctl. Here is my unit file: root@om:~# cat /etc/systemd/system/ssh-tunnel-foo-de.service [Unit] Description=Tunnel ...
user avatar
  • 2,904
8 votes
1 answer
4k views

View unbuffered log output from journalctl

I have several systemd services defined. They log both to disk and also to the systemd journal, which I can monitor using journalctl -n 0 -fu myservice. However, I notice that the logs that I see ...
user avatar
  • 185
48 votes
2 answers
46k views

How do view older journalctl logs (after a rotation maybe?)

I am running docker on ubuntu 16.04 and would like to view the logs. However, I am unable to view logs after what I am guessing is some sort of rotation or the logs grow to a certain size. I have not ...
user avatar
  • 781
39 votes
2 answers
32k views

How to allow a user to use journalctl to see user-specific systemd service logs?

I am running user-level services in Ubuntu 16.04 LTS. For example, I have my test.service located at ~/.config/systemd/user/test.service. I was able to run the service by doing systemctl --user start ...
user avatar
22 votes
6 answers
21k views

journalctl: how to display colors in its output?

The output of journalctl really looks messy without colors. Is it possible to add colors to its output? On my system it seems only important lines are highlighted. Even dmesg can output with color by ...
user avatar
  • 770
7 votes
3 answers
12k views

systemd-journald Doesn't start at all

After deleting my /var/log/journal by accident, I am unable to recover from the consequences. systemd-journald keeps failing over and over again every time I try to start it. when I run: $ journalctl ...
user avatar
  • 231
2 votes
1 answer
2k views

Truncated/missing logs with systemd on Ubuntu 16.04

I am using Ubuntu 16.04 server, have created a basic nodejs script and packaged it in a simple systemd service. Content of api.service at /lib/systemd/system/api.service: [Unit] Description=api ...
user avatar
2 votes
3 answers
2k views

combined local and remote journald logs

I am using journald forwarding using systemd-journal-remote (local site) and systemd-journal-upload (remote site) on centos7 with systemd-219 on both machines. Local journals are stored in /var/log/...
user avatar
  • 123
28 votes
6 answers
23k views

Is there a way to make journalctl show logs from "the last time foo.service ran"?

I'm particularly interested in this for looking at the output of oneshot services that run on a timer. The --unit flag is close, but it concatenates all the runs of the service together. The most ...
user avatar
12 votes
2 answers
29k views

systemd's journalctl: how to filter by message?

journalctl looks like a great tool for looking through logs, but I'm stuck on what feels like a simple ask: I want to see all cron messages that contain the phrase update-ipsets. Of course I can do ...
user avatar
  • 2,557
11 votes
1 answer
3k views

How to display syslog priority level in systemd's journalctl

journalctl allows me to filter on priority (-p) and color-codes the priority in the output. But is there any way to get it to output the priority directly, as text?
user avatar
6 votes
1 answer
17k views

How can I output logs to a file from the content of a service with systemd

Well, I have a service configured with systemctl. This is the config file: [Unit] Description=The description of the service (: After=network.target [Service] ExecStartPre=/bin/echo 'Starting ...
user avatar
  • 193
4 votes
0 answers
331 views

journalctl prints the entire system log when following

[root@utility ~]# uname -rv 2.6.32-042stab093.5 #1 SMP Wed Sep 10 17:39:49 MSK 2014 [root@utility ~]# cat /etc/redhat-release CentOS Linux release 7.1.1503 (Core) [root@utility ~]# journalctl --...
user avatar
  • 151
16 votes
2 answers
11k views

journalctl access for non-root users

The journald documentation says that adding a user to 'systemd-journal' group or 'adm' group allows the user to access system-wide journal. I'm running the latest CentOS 7 and I seem to have problem ...
user avatar
  • 211
1 vote
0 answers
317 views

unable to query the systemd journal with journalctl

I'm using Red Hat Enterprise Application Platform 6.4.2.GA on following system: # cat /etc/redhat-release Red Hat Enterprise Linux Server release 7.1 (Maipo) # uname -a Linux X 3.10.0-229.7.2.el7....
user avatar
  • 12.2k