No journal files were found, for journalctl.

bodo · 2015-02-11 19:33:32

Hello,

May be it's a dumb question, but is there a reason why journalctl won't create journal file in /var/log?

[@arch]# journalctl
No journal files were found.

Beware that my /var/log is mounted as:

#/var/log
/var/log /var/log tmpfs nodev,nosuid 0 0

If I uncomment it, so /var/log is now mounted on my SSD disk, journalctl will create /var/log/journal file and I'm able to use journalctl to read the log.

Any advise are welcome, thank you.

Last edited by bodo (2015-02-11 19:34:07)

r0b0t · 2015-02-11 19:40:18

- syslog not runnnig?
- no more space?
- I/O errors and files can't be written?
- /usr/lib/systemd/systemd-journald not running?
- storage set to "auto" to /etc/systemd/journald.conf ?
- If you or some program delete that directory, systemd will not recreate it automatically; however, it will be recreated during the next update of the systemd package. Until then, logs will be written to /run/systemd/journal, and logs will be lost on reboot.
https://wiki.archlinux.org/index.php/Systemd#Journal

dice · 2015-02-11 20:07:27

you should check if /var/log is writeable when mounted as tmpfs.
Also check the output of

mount

for mount flags that are set by default. For example it might be the case that for some reason your /var/log gets mounted read only.

bodo · 2015-02-12 08:02:14

dice wrote:

you should check if /var/log is writeable when mounted as tmpfs.
Also check the output of
mount
for mount flags that are set by default. For example it might be the case that for some reason your /var/log gets mounted read only.

It's mounted as rw, I suppose from mount output:

/var/log on /var/log type tmpfs (rw,nosuid,nodev,relatime)

also

drwxr-xr-x  3 root root    140 Feb 12 07:46 log

So it must be something else.

Spider.007 · 2015-02-12 09:17:56

bodo wrote:

[...]
So it must be something else.

So how about checking the issues mentioned by r0b0t? I'm pretty sure you're experiencing one of the issue he mentions

bodo · 2015-02-12 10:06:24

Ok, I've got it! The trick was to configure

/etc/systemd/journald.conf

with option

[Journal]
Storage=volatile

Now it's logging to

/run/log/journal

Thanks all of you.

snakeroot · 2015-02-12 12:47:23

The issue with this approach is that it will make it very difficult to debug serious, freeze-the-machine, force-to-reboot grade issues, since the journal will be stored only in RAM and thus lost on reboot.

Given your desire to protect your SSD, would it make sense to reset Storage to persistent but reset MaxLevelStore to something pretty high (emerg, alert, crit) from its default level of "debug"? That way you'd have a permanent record on disk of truly bad things, but not the wear and tear of writing every little thing.

Regards,

bodo · 2015-02-12 15:29:38

snakeroot wrote:

The issue with this approach is that it will make it very difficult to debug serious, freeze-the-machine, force-to-reboot grade issues, since the journal will be stored only in RAM and thus lost on reboot.
Given your desire to protect your SSD, would it make sense to reset Storage to persistent but reset MaxLevelStore to something pretty high (emerg, alert, crit) from its default level of "debug"? That way you'd have a permanent record on disk of truly bad things, but not the wear and tear of writing every little thing.
Regards,

I understand the drawbacks, but for now It's good enough solution, primary for playing with systemd, it took me 2 years to push myself to "modernize - read as, moving from netcfg to netctl" my ARCH . I also have HDD disk so in spare time I could create standalone partition for /var/log, hopefully not again in next 2 years .

Arch Linux

#1 2015-02-11 19:33:32

No journal files were found, for journalctl.

#2 2015-02-11 19:40:18

Re: No journal files were found, for journalctl.

#3 2015-02-11 20:07:27

Re: No journal files were found, for journalctl.

#4 2015-02-12 08:02:14

Re: No journal files were found, for journalctl.

#5 2015-02-12 09:17:56

Re: No journal files were found, for journalctl.

#6 2015-02-12 10:06:24

Re: No journal files were found, for journalctl.

#7 2015-02-12 12:47:23

Re: No journal files were found, for journalctl.

#8 2015-02-12 15:29:38

Re: No journal files were found, for journalctl.

Board footer