Server Fault Stack Exchange
Server Fault Stack Exchange

Questions tagged [journald]

102 questions
1
vote
2 answers

Best way to archive journald logs in a space-efficient way?

It has been established that journald logs are huge. On this specific system, the logs grow about 3GB per week. For audit purposes I would like to preserve system logs for a longer time than what can I comfortably store on that system; this would…
liori
  • 767
  • 3
  • 15
1
vote
0 answers

Journal out of order

Trying to figure out what caused one of our servers (Ubuntu 18.04) to become unresponsive, I was looking through the journal ( journalctl -r) and saw strangely out of order timestamps Apr 17 09:20:19 myserver kernel: microcode: microcode updated…
SmoteKerrek
  • 11
  • 1
1
vote
0 answers

Disable "Failed password" ssh logs

Bots are tirelessly trying to log into my server using ssh. That does not bother me, because my passwords are good, but I don't like the fact that ssh spam fills journald logs. I'd like to filter out this noise. Please note that I don't want to…
vbezhenar
  • 261
  • 1
  • 3
  • 10
0
votes
1 answer

RateLimitIntervalSec and RateLimitBurst in journald.conf are not working at all

I am trying to see how log drop count in the journald works. In the /etc/systemd/journald.conf file, I modified RateLimitIntervalSec to 1 second and the RateLimitBurst to 2 so that I can see some logs getting dropped if I restart one systemd units(I…
susenj
  • 101
  • 1
0
votes
1 answer

Using journald without systemd?

I would like to use journald within a container without systemd. Is this possible? If so, how to do this? What are the issues to take care?
Gns
  • 113
  • 1
0
votes
1 answer

Q: journalctl to prefix message with own meta data?

How would one prefix journald log entries with metadata within the log message? I'm thinking I may have to view one of the verbose outputs, filter out line breaks and all extra info, find just the items I am looking for (DateTime, Docker…
Eric Duncan
  • 225
  • 3
  • 14
0
votes
1 answer

High CPU usage with systemd-journal 219 on CentOS

systemd-journal seems to have hig CPU usage, compare to HAProxy that is the actual service on the node: 385 root 20 0 69948 26152 25776 S 3.0 0.2 0:04.05 systemd-journal 22509 haproxy 20 0 58264 7256 1812 S 1.3 0.0 …
Istvan
  • 2,582
  • 3
  • 22
  • 29
0
votes
1 answer

Journalling stdout with systemd when running as specific user

Consider the following test-echo.service: [Unit] Description=Testing journalling of stdout [Service] ExecStart=/bin/echo hello world [Install] WantedBy=multi-user.target Its stdout ends up in the journal as expected: $ sudo systemctl enable…
Ruud
  • 135
  • 7
0
votes
1 answer

Citadel outputting 'Broadcase message from systemd-journald@hostname' continuously

I installed citadel-suite using apt-get on Ubuntu 15.10. I then uninstalled it using 'sudo apt-get remove citadel-suite; sudo apt-get purge citadel-suite', manually deleted the directory '/etc/citadel/', and then re-installed it using apt-get. I…
MikeyE
  • 127
  • 1
  • 10
0
votes
2 answers

Don't write "no free leases" messages from ISC DHCP server to systemd log

I have a DHCP server that provides TFTP server IP, NBP (Network Bootstrp Program) and IP addresses to PXE clients. When a machine boots normally (not PXE boot) it gets an IP address from another DHCP server. Every time a machine boots normally the…
xloto
  • 109
  • 7
0
votes
0 answers

Systemd - do not log output from particular service, but forward to syslog

Is it possible for systemd to not log data from particular service, but to still forward it to the syslog? StandardOutput=syslog StandardError=syslog
GioMac
  • 4,544
  • 4
  • 27
  • 41
0
votes
1 answer

How do I disable logging from systemd when I login

My journald log contains lots of messages of this kind: Jun 03 11:38:37 test1 systemd[225427]: pam_unix(systemd-user:session): session opened for user user(uid=1000) by (uid=0) Jun 03 11:38:37 test1 systemd[225427]: Queued start job for default…
jurgen
  • 111
  • 2
0
votes
1 answer

When logging out to journald, when would you use a library and when would you use systemd config options to pipe StdOut/StdErr to journald

I've found library's that allow logging out to journald which suggests that, yes you should use a library where possible and log to journald from inside your app. But then there are tools like systemd-cat or systemd config options like this (from…
Thermatix
  • 115
  • 4
0
votes
1 answer

Why python-journald-rsyslog seems to batch/dely log write?

I intend to log a python script output. Here what it looks like : arm@stackoverflow > cat test.py #!/usr/bin/python from time import sleep while True: print("Hello") sleep(1) I try to use standard syslog way to handle logs, I…
moutonjr
  • 498
  • 5
  • 10
0
votes
1 answer

Rotate Logs of systemd-journal-remote

I am running Ubuntu 22.02 with systemd-journal-remote version 249.11-0ubuntu3.6. The hard drive was full because log rotation was not set-up. To manage file size of journals I updated my config at…
antonio amaddio
  • 11
  • 3
1 2 3 4 5
6
7