I have journald configured to use persistent log file i.e. the default. It is allowed to use up to 50M. This was working great but today I needed to read the journal (my laptop is shutting itself off again for no reason and repeatedly ) and discovered they were not there. More specifically, only a single log file is present and I've only got information since booting.
$ l /var/log/journal/* total 232K drwxr-xr-x 2 root root 20K Chw 12 00:34 ./ drwxr-xr-x 3 root root 4.0K Tach 28 00:15 ../ -rw-r----- 1 root adm 200K Chw 12 00:52 system.journal $ cat /etc/systemd/journald.conf # This file is part of systemd. # # systemd is free software; you can redistribute it and/or modify it # under the terms of the GNU Lesser General Public License as published by # the Free Software Foundation; either version 2.1 of the License, or # (at your option) any later version. # # See journald.conf(5) for details [Journal] #Storage=auto #Compress=yes #Seal=yes #SplitMode=login #RateLimitInterval=10s #RateLimitBurst=200 SystemMaxUse=50M #SystemKeepFree= SystemMaxFileSize=1M #RuntimeMaxUse= #RuntimeKeepFree= #RuntimeMaxFileSize= #MaxRetentionSec= #MaxFileSec=1month #ForwardToSyslog=yes #ForwardToKMsg=no #ForwardToConsole=no #TTYPath=/dev/console #MaxLevelStore=debug #MaxLevelSyslog=debug #MaxLevelKMsg=notice #MaxLevelConsole=info
Is there any reason this would happen? That is, what am I missing? I'm sure something must be staring at me - or I've somehow missed something in a pacman message or the news telling me something essential I needed to do and haven't. But I can't see it.
But it worked perfectly until... well, until very, very recently.
Last edited by cfr (2013-02-13 00:07:23)
Just a shot in the dark... but if it is ext4, have you checked the lost+found?
Hmm... Didn't think of that. Thanks. In this case, though, I have figured out the issue. That partition was short of space so the journal was helpfully restricting itself to a brief runtime log. I do wish it would *say* something, though, rather than just doing it!
Last edited by cfr (2013-02-13 00:07:11)