Skip to content

Instantly share code, notes, and snippets.

@JPvRiel

JPvRiel/journalctl_enable_persistent_storage.md

Last active September 11, 2024 01:18
Show Gist options
  • Save JPvRiel/b7c185833da32631fa6ce65b40836887 to your computer and use it in GitHub Desktop.
Save JPvRiel/b7c185833da32631fa6ce65b40836887 to your computer and use it in GitHub Desktop.
Download ZIP
Enable persistent storage for the systemd journal log
Raw
journalctl_enable_persistent_storage.md

Enable persistent storage for the systemd journal log

Overview

The assumed default setting in /etc/systemd/journald.conf is Storage=auto which implies that systemd journaling will only persist the journal if the expected storage location is available. Otherwise, the journal data is stored in memory and lost between reboots. On Ubuntu 16.04, /var/log/journal does not exist by default. Create it to keep and query events from previous boots.

Considerations:

  • Syslog still provides the persistant log records for Ubuntu 16.04, so enabling persistant systemd journal logging does cause a level of duplicaiton.
  • There are sane defaults:
    • SystemMaxUse is 10% for peristant storage in /var/log/journal, or 15% for memory use in /run/log/journal
    • SystemMaxFiles=100
    • SystemMaxFileSize = SystemMaxUse/8
  • More config options such as MaxLevelStore can help control how fast storage is consumed.

Create storage and enable storage location

mkdir -p /var/log/journal
systemd-tmpfiles --create --prefix /var/log/journal
systemctl restart systemd-journald

Reference

@kwaaak
Copy link

kwaaak commented Aug 4, 2021

As suggested by several other locations, use killall -USR1 systemd-journald

killall -USR1 /lib/systemd/systemd-journald for me (Raspbian GNU/Linux 10 (buster))

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment