Evaluate systemd logs using journalctl

Finely Filtered

© Lead Image © Juergen Priewe, 123RF.com

© Lead Image © Juergen Priewe, 123RF.com

Article from Issue 201/2017
Author(s):

The journal is the systemd component responsible for viewing and managing logfiles.

The systemd service journald creates very comprehensive logs, which allow you to analyze data in a variety of ways. Once you get used to the convenience this affords, you won't even miss the old-style logfiles.

Better structured

The journald daemon collects messages from the kernel, initrd, any running services and other available sources and collects them into one place. This results in a massive amount of data compared to the logfiles you're traditionally used to such as /var/log/messages or /var/log/syslog. You'll also find a huge amount of metadata is included, which can significantly improve your results when searching the journal.

This also results in a larger amount of data which is tricky to store in traditional text files. This is why the journald daemon stores this information in binary files. You can read this data, using the command journalctl. If necessary, you can also convert the binary files to other formats for further analysis.

[...]

Use Express-Checkout link below to read the full article (PDF).

Buy Linux Magazine

SINGLE ISSUES
 
SUBSCRIPTIONS
 
TABLET & SMARTPHONE APPS
Get it on Google Play

US / Canada

Get it on Google Play

UK / Australia

Related content

  • Command Line – Systemd Journals

    Systemd inaugurated a new journal system, journald. We look at how to view and interpret the new system logs.

  • systemd Journal

    The new logging component included with systemd offers some advanced features you won't find in Syslog.

  • QJournalctl

    QJournalctl is a convenient GUI tool that will help you track down log data in the systemd journal.

  • Command Line – Systemd

    Systemd is a complex management structure with many commands and capabilities. We provide an overview of a few basic commands and their use.

  • Systemd GUIs

    Graphical frontends make it easier to take full advantage of the Systemd process manager. We examine some leading tools for the KDE environment.

comments powered by Disqus