Evaluate systemd logs using journalctl

Finely Filtered

© Lead Image © Juergen Priewe, 123RF.com

© Lead Image © Juergen Priewe, 123RF.com

Article from Issue 201/2017
Author(s):

The journal is the systemd component responsible for viewing and managing logfiles.

The systemd service journald creates very comprehensive logs, which allow you to analyze data in a variety of ways. Once you get used to the convenience this affords, you won't even miss the old-style logfiles.

Better structured

The journald daemon collects messages from the kernel, initrd, any running services and other available sources and collects them into one place. This results in a massive amount of data compared to the logfiles you're traditionally used to such as /var/log/messages or /var/log/syslog. You'll also find a huge amount of metadata is included, which can significantly improve your results when searching the journal.

This also results in a larger amount of data which is tricky to store in traditional text files. This is why the journald daemon stores this information in binary files. You can read this data, using the command journalctl. If necessary, you can also convert the binary files to other formats for further analysis.

[...]

Use Express-Checkout link below to read the full article (PDF).

Buy Linux Magazine

SINGLE ISSUES
 
SUBSCRIPTIONS
 
TABLET & SMARTPHONE APPS
Get it on Google Play

US / Canada

Get it on Google Play

UK / Australia

Related content

  • Command Line – Systemd Journals

    Systemd inaugurated a new journal system, journald. We look at how to view and interpret the new system logs.

  • systemd Journal

    The new logging component included with systemd offers some advanced features you won't find in Syslog.

  • QJournalctl

    QJournalctl is a convenient GUI tool that will help you track down log data in the systemd journal.

  • Command Line – Systemd

    Systemd is a complex management structure with many commands and capabilities. We provide an overview of a few basic commands and their use.

  • Command Line: Systemd

    Wondering what all the fuss is about systemd? We explain the basic concepts and capabilities of the new system management suite – coming soon to a distro near you.

comments powered by Disqus
Subscribe to our Linux Newsletters
Find Linux and Open Source Jobs
Subscribe to our ADMIN Newsletters

Support Our Work

Linux Magazine content is made possible with support from readers like you. Please consider contributing when you’ve found an article to be beneficial.

Learn More

News