Server Fault Stack Exchange
Server Fault Stack Exchange

Questions tagged [journald]

102 questions
2
votes
1 answer

Truncated/missing logs with systemd on Ubuntu 16.04

I am using Ubuntu 16.04 server, have created a basic nodejs script and packaged it in a simple systemd service. Content of api.service at…
quentinadam
  • 321
  • 2
  • 12
2
votes
3 answers

combined local and remote journald logs

I am using journald forwarding using systemd-journal-remote (local site) and systemd-journal-upload (remote site) on centos7 with systemd-219 on both machines. Local journals are stored in /var/log/journal//*.journal whereas remote…
resi
  • 123
  • 1
  • 5
2
votes
1 answer

systemd journal and docker

I am using CoreOS which uses systemd and docker. One of the big issues with systemd and CoreOS is that it doesn't play 100% nice with docker. Or maybe docker doesn't play 100% nice either. Another issue I'm having with it is that log events that…
hookenz
  • 14,472
  • 23
  • 88
  • 143
2
votes
0 answers

How can I pull data from journald and outputing it to logz via rsyslog

I have a number of servers that use CoreOS. CoreOS natively uses journald for all it's log files. The latest stable release incorporates docker 1.9 so it doesn't yet support docker log drivers. After exploring multiple avenues, I think rsyslog…
hookenz
  • 14,472
  • 23
  • 88
  • 143
2
votes
1 answer

How to enable syscall auditing in CoreOs?

Since CoreOs 766, the auditing subsystem is partially integrated: The audit subsystem has been enabled in the kernel and auditctl added to the image. Most audit events are ignored by default. The audit rules may be modified in…
0x90
  • 83
  • 8
2
votes
1 answer

How to send a systemd ssh error so that it's picked by fail2ban

I have a setup which uses ansible and vagrant to test a custom role which installs and configures fail2ban. I have written myself a simple test playbook which uses the fail2ban role and applies the necessary configuration as expected. My intention,…
tftd
  • 1,498
  • 7
  • 25
  • 40
2
votes
1 answer

Set INFO/ERROR priority for messages logged to journal via stdout and stderr?

We have many production apps (first and third-party) that leave logging up to the process that runs the app and just log to stdout for INFO and stderr for ERROR logs (ie only 2 log priorities: INFO|ERROR). With a systemd service unit for an app this…
mattpr
  • 621
  • 4
  • 10
2
votes
1 answer

How I can send all logs from journald to GCP Logging?

Don't know what to add more to question, just want to send all logs. My applications write logs to journald, there is no files on disk. UPD. Just to clarify, there are files where journald store logs, my application do not create any logs files.
Raf
  • 173
  • 7
2
votes
0 answers

Service not logging to journalctl

I have a user service which is placed under /home//.config/systemd/user/.service When I perform systemctl --user status I have the desired output, for example: @:~$ systemctl --user status ●…
Daniel
  • 21
  • 1
  • 3
2
votes
1 answer

journalctl --list-boots is not listing all boots

I have a Raspberry Pi running a custom Yocto image and it's using systemd-journald for logging. I'm wondering why there is a difference between: root@raspberrypi4:~# journalctl -o verbose | grep -e '_MACHINE_ID\|_BOOT_ID' | sort -u …
evading
  • 123
  • 6
1
vote
1 answer

Linux journalctl not synced with systemctl status / Journalctl not updating

I am running my custom service, let's call it "foo.service". It's a gunicorn python process which logs a few things. I used to be able to get a real-time log overview using journalctl -u -f but now the journal seems to be stuck at some…
Dubb
  • 113
  • 1
  • 4
1
vote
0 answers

journald forwarding to syslog seems to be lagged

I'm seeing an issue on a Ubuntu 16.04 box where the copying/forwarding of journal messages to /var/log/syslog seems to be delayed: theuser@host:/etc/systemd$ sudo journalctl -n 1 && sudo tail -n 1 /var/log/syslog -- Logs begin at Wed 2018-12-12…
Jordan0Day
  • 111
  • 2
1
vote
1 answer

`journalctl -f -m` does not interleave remote and local

I currently have a 2-server setup (3 servers in total, one still to be configured for this) with one server using systemd-journal-remote (.socket & .service) to collect all log entries from the other machine, which uploads with…
Shadowjonathan
  • 463
  • 4
  • 7
1
vote
0 answers

system freeze after systemd-tmpfiles-clean executed

recently i got a problem, i run mysql on docker with k8s , the system load getting high in 2 days from 1->500+, the /var/log/messages infomation: Aug 17 19:50:07 SVR5798HW1288 dockerd[1890]: time="2018-08-17T19:50:07.435900074+08:00" level=debug…
Brad Lee
  • 11
  • 1
1
vote
3 answers

journalctl --follow isn't advancing

I have a program that continually reads the output of: journalctl -o json --follow And sends it to another process. And while it outputs journal entries initially from the tail, new ones don't appear on stdout while it's running. It's as though…
hookenz
  • 14,472
  • 23
  • 88
  • 143
1 2 3
4
5 6 7