Journalctl missing entries

pfannkuchen_gesicht · 2015-10-29 09:04:47

Hello,
today something weird was going on. I have my notebook set too sleep after 1 1/2 hour and usually use it to listen to music on some website before I sleep. Today I wake up and my notebook was not sleeping, but even more bizarrely the tab with the music website was closed.
So anyway, I wanted to check the journalctl log to see if there was anything happening that could've cause this, but to my surprise the log is missing this whole month except today.
It looks like this:

...
Sep 26 14:06:25 pfannkuchen-NB systemd[1]: Starting Power-Off...
Sep 26 14:06:25 pfannkuchen-NB systemd[1]: Shutting down.
Sep 26 14:06:25 pfannkuchen-NB systemd-shutdown[1]: Sending SIGTERM to remaining processes...
Sep 26 14:06:25 pfannkuchen-NB systemd-journal[213]: Journal stopped
-- Reboot --
Okt 29 09:35:41 pfannkuchen-NB systemd-journal[192]: Runtime journal (/run/log/journal/) is currently using 8.0M.
                                                     Maximum allowed usage is set to 193.1M.
                                                     Leaving at least 289.7M free (of currently available 1.8G of space).
                                                     Enforced usage limit is thus 193.1M.
Okt 29 09:35:41 pfannkuchen-NB kernel: microcode: CPU0 microcode updated early to revision 0x29, date = 2013-06-12
Okt 29 09:35:41 pfannkuchen-NB kernel: Initializing cgroup subsys cpuset
Okt 29 09:35:41 pfannkuchen-NB kernel: Initializing cgroup subsys cpu
Okt 29 09:35:41 pfannkuchen-NB kernel: Initializing cgroup subsys cpuacct
Okt 29 09:35:41 pfannkuchen-NB kernel: Linux version 4.2.2-1-ARCH (builduser@tobias) (gcc version 5.2.0 (GCC) ) #1 SMP PREEMPT T
Okt 29 09:35:41 pfannkuchen-NB kernel: Command line: BOOT_IMAGE=/vmlinuz-linux root=UUID=1fb7346b-c845-4d9e-a692-d24900d44168 rw
Okt 29 09:35:41 pfannkuchen-NB kernel: x86/fpu: xstate_offset[2]: 0240, xstate_sizes[2]: 0100
Okt 29 09:35:41 pfannkuchen-NB kernel: x86/fpu: Supporting XSAVE feature 0x01: 'x87 floating point registers'
Okt 29 09:35:41 pfannkuchen-NB kernel: x86/fpu: Supporting XSAVE feature 0x02: 'SSE registers'
Okt 29 09:35:41 pfannkuchen-NB kernel: x86/fpu: Supporting XSAVE feature 0x04: 'AVX registers'
Okt 29 09:35:41 pfannkuchen-NB kernel: x86/fpu: Enabled xstate features 0x7, context size is 0x340 bytes, using 'standard' forma
Okt 29 09:35:41 pfannkuchen-NB kernel: x86/fpu: Using 'eager' FPU context switches.
Okt 29 09:35:41 pfannkuchen-NB kernel: e820: BIOS-provided physical RAM map:
Okt 29 09:35:41 pfannkuchen-NB kernel: BIOS-e820: [mem 0x0000000000000000-0x000000000009d7ff] usable
Okt 29 09:35:41 pfannkuchen-NB kernel: BIOS-e820: [mem 0x000000000009d800-0x000000000009ffff] reserved
Okt 29 09:35:41 pfannkuchen-NB kernel: BIOS-e820: [mem 0x00000000000e0000-0x00000000000fffff] reserved
Okt 29 09:35:41 pfannkuchen-NB kernel: BIOS-e820: [mem 0x0000000000100000-0x000000001fffffff] usable

So any idea why the entries between 26. september and 29. october are missing?
Do I have to worry about more than just missing journal entries?

Thanks in advance!

mauritiusdadd · 2015-10-29 20:33:09

Is your journal corrupted by any chance? What is the output of

$ journalctl --verify

?

pfannkuchen_gesicht · 2015-10-30 14:57:09

It says it's fine:

PASS: /run/log/journal/3b468e34903e4a61b79b83c3413e8e69/system.journal  
PASS: /var/log/journal/3b468e34903e4a61b79b83c3413e8e69/user-1000@75816bcf13f54f7788c9e7f378bf22f4-000000000063e454-00051fee8993483e.journal
PASS: /var/log/journal/3b468e34903e4a61b79b83c3413e8e69/system@71e50474a8894d108fd9cf607875f858-000000000062c5da-00051fed809f9722.journal
PASS: /var/log/journal/3b468e34903e4a61b79b83c3413e8e69/user-1000@75816bcf13f54f7788c9e7f378bf22f4-0000000000555504-00051f513420b89c.journal
PASS: /var/log/journal/3b468e34903e4a61b79b83c3413e8e69/system@71e50474a8894d108fd9cf607875f858-0000000000601e6d-00051fdaccad5c18.journal
PASS: /var/log/journal/3b468e34903e4a61b79b83c3413e8e69/system@71e50474a8894d108fd9cf607875f858-0000000000000001-00051fa561cac48e.journal
PASS: /var/log/journal/3b468e34903e4a61b79b83c3413e8e69/user-1000@75816bcf13f54f7788c9e7f378bf22f4-00000000005d4aab-00051fc97f15f0ab.journal
PASS: /var/log/journal/3b468e34903e4a61b79b83c3413e8e69/system@71e50474a8894d108fd9cf607875f858-000000000065710a-00051ff0feeff8ff.journal
PASS: /var/log/journal/3b468e34903e4a61b79b83c3413e8e69/user-1000@75816bcf13f54f7788c9e7f378bf22f4-00000000005d7fcf-00051fd860200084.journal
PASS: /var/log/journal/3b468e34903e4a61b79b83c3413e8e69/user-1000.journal
PASS: /var/log/journal/3b468e34903e4a61b79b83c3413e8e69/system@71e50474a8894d108fd9cf607875f858-00000000005acc22-00051fc4b1dd5672.journal
PASS: /var/log/journal/3b468e34903e4a61b79b83c3413e8e69/user-1000@75816bcf13f54f7788c9e7f378bf22f4-0000000000592a43-00051fb34fc15ba1.journal
PASS: /var/log/journal/3b468e34903e4a61b79b83c3413e8e69/system@00051fa5622ac639-54bdbe9adec02607.journal~
PASS: /var/log/journal/3b468e34903e4a61b79b83c3413e8e69/system@71e50474a8894d108fd9cf607875f858-0000000000582661-00051fb1ae2bcd2e.journal
PASS: /var/log/journal/3b468e34903e4a61b79b83c3413e8e69/user-1000@75816bcf13f54f7788c9e7f378bf22f4-000000000052b82a-00051f3cad7cdde0.journal
PASS: /var/log/journal/3b468e34903e4a61b79b83c3413e8e69/user-1000@75816bcf13f54f7788c9e7f378bf22f4-00000000006081ee-00051fdbd6bab963.journal
PASS: /var/log/journal/3b468e34903e4a61b79b83c3413e8e69/system.journal  
PASS: /var/log/journal/3b468e34903e4a61b79b83c3413e8e69/system@71e50474a8894d108fd9cf607875f858-00000000005d744d-00051fd84abf43b3.journal
PASS: /var/log/journal/3b468e34903e4a61b79b83c3413e8e69/user-1000@75816bcf13f54f7788c9e7f378bf22f4-000000000065ddae-00051ff1ba6e0c1d.journal

mauritiusdadd · 2015-10-30 16:25:44

And what is the output of the following command?

$ journalctl --list-boots --no-pager

pfannkuchen_gesicht · 2015-11-01 16:26:00

huh, seems like it's not logging properly since 25.09.

-25 786b49cd37e347e1a616cbea07dce8e5 Di 2015-09-08 15:52:32 CEST—Di 2015-09-08 16:08:54 CEST
-24 dd54e738995d4e368e033dcec04d420f Di 2015-09-08 20:07:42 CEST—Mi 2015-09-09 08:41:52 CEST
-23 b65a9ad3238841939c7f30f1ee7ba8a2 Mi 2015-09-09 08:55:30 CEST—Mi 2015-09-09 16:21:54 CEST
-22 c0f658688b0e47c28f2af8bbd9c07054 Mi 2015-09-09 17:40:35 CEST—Mi 2015-09-09 19:44:06 CEST
-21 d2adb35f8cbe45178e8438e1906e21d4 Mi 2015-09-09 19:46:46 CEST—Fr 2015-09-11 12:48:19 CEST
-20 373424e55f4d47bbbf87d3320e87bafc Sa 2015-09-12 13:47:32 CEST—Sa 2015-09-12 14:31:19 CEST
-19 191be008676b4a25a9612baa76c1da1c Sa 2015-09-12 20:13:32 CEST—Sa 2015-09-12 20:19:04 CEST
-18 9f436d25651e49f99ce4719fb6f530a3 So 2015-09-13 20:47:34 CEST—Mo 2015-09-14 08:38:05 CEST
-17 694db35985ff461e8c204733854d32b2 Mo 2015-09-14 08:53:29 CEST—Mo 2015-09-14 15:51:31 CEST
-16 0697bb3242f54f3fb9e7ebcccc31d1d3 Mo 2015-09-14 17:16:52 CEST—Di 2015-09-15 08:40:54 CEST
-15 b57517ba8f224beb88026a448e02a9f7 Di 2015-09-15 08:55:01 CEST—Di 2015-09-15 15:52:50 CEST
-14 cda6968379a44fad96bd1068de1c177a Di 2015-09-15 19:56:49 CEST—Mi 2015-09-16 08:54:24 CEST
-13 5a7fedc03efc4c7a82f727904cfa5106 Mi 2015-09-16 09:12:57 CEST—Mi 2015-09-16 16:38:11 CEST
-12 fa8a932dc9be4da6bda59e244a677337 Mi 2015-09-16 16:59:43 CEST—Do 2015-09-17 09:32:47 CEST
-11 7264906b67fd4c9482ae46c575989908 Do 2015-09-17 09:44:47 CEST—Do 2015-09-17 15:52:57 CEST
-10 20493512f1e5444c8be96b56e842d7ce Do 2015-09-17 16:26:47 CEST—Fr 2015-09-18 11:41:53 CEST
 -9 3d61d7e4e200450b863311931f75d8ce So 2015-09-20 20:38:41 CEST—Mo 2015-09-21 09:33:58 CEST
 -8 d3d64a89dd6e461f92a6c11e381668ee Mo 2015-09-21 13:31:39 CEST—Di 2015-09-22 08:58:35 CEST
 -7 041cb612e97c4062b65d4dd822ce4b71 Di 2015-09-22 09:30:23 CEST—Di 2015-09-22 14:02:05 CEST
 -6 51baf3deb1184bf2a29939a1bf7b15ec Di 2015-09-22 17:35:24 CEST—Do 2015-09-24 11:19:45 CEST
 -5 dd71cc2ee58b43e994a4170ba276f5d9 Do 2015-09-24 11:40:30 CEST—Do 2015-09-24 16:52:29 CEST
 -4 7df15fdf527748fa86388f4631bbc20d Do 2015-09-24 20:14:31 CEST—Fr 2015-09-25 01:34:47 CEST
 -3 27ede3a753a64a7fa4ac70bfccad3731 Fr 2015-09-25 01:35:06 CEST—Fr 2015-09-25 12:24:50 CEST
 -2 e4a391b37b0a473087fe403b3de20594 Fr 2015-09-25 13:14:02 CEST—Fr 2015-09-25 17:02:50 CEST
 -1 cd91f9a2abb0455e95ef6b47017ac728 Fr 2015-09-25 17:43:19 CEST—Sa 2015-09-26 14:06:25 CEST
  0 36c31bb506d54a5f80fbe1f127421840 So 2015-11-01 17:22:46 CET—So 2015-11-01 17:24:02 CET

mauritiusdadd · 2015-11-01 20:28:35

The fact that systemd-journald does not save new boot entries along with the fact that you have a file under /run/log/journal/ makes me suspect that the persistent storage is disabled, can you please post your /etc/systemd/journald.conf and also the output of the following command?

$ systemctl --all status systemd-journald

pfannkuchen_gesicht · 2015-11-25 22:10:34

huh, I should start writing down what I do. I configured journald to not log to disk, because it would always use up all the hdd space...
The closed website is still a mystery though.

mauritiusdadd · 2015-11-26 08:45:18

pfannkuchen_gesicht wrote:

huh, I should start writing down what I do. I configured journald to not log to disk, because it would always use up all the hdd space...
The closed website is still a mystery though.

Unfortunately, without journal entries it seems that will remain a mystery... but at least we found why the journal entries were missing
PS: remember to mark the thread as [SOLVED].

Arch Linux

#1 2015-10-29 09:04:47

Journalctl missing entries

#2 2015-10-29 20:33:09

Re: Journalctl missing entries

#3 2015-10-30 14:57:09

Re: Journalctl missing entries

#4 2015-10-30 16:25:44

Re: Journalctl missing entries

#5 2015-11-01 16:26:00

Re: Journalctl missing entries

#6 2015-11-01 20:28:35

Re: Journalctl missing entries

#7 2015-11-25 22:10:34

Re: Journalctl missing entries

#8 2015-11-26 08:45:18

Re: Journalctl missing entries

Board footer