Arch Linux

kabum

Member

Registered: 2011-12-05

Posts: 6

[Solved] journalctl output is truncated

Hi,

it's maybe a really dumb question but I didn't get it why it isn't working

I want to look at the log of my system but it is always truncated at 9:00 am and states "-- Reboot --" but I have an uptime of 5 days.  That is how it looks today:

$ uptime
 09:45:23 up 5 days, 18:13,  3 users,  load average: 0,52, 0,47, 0,46
$ sudo journalctl
-- Logs begin at Mo 2013-10-07 15:32:51 CEST, end at Mo 2014-01-20 09:34:29 CET. --
Okt 07 15:32:51 wigrid systemd[26707]: Stopping Default.
Okt 07 15:32:51 wigrid systemd[26707]: Stopped target Default.
Okt 07 15:32:51 wigrid systemd[26707]: Starting Shutdown.
Okt 07 15:32:51 wigrid systemd[26707]: Reached target Shutdown.
Okt 07 15:32:51 wigrid systemd[26707]: Starting Exit the Session...
-- Reboot --
Jan 20 09:01:01 wigrid CROND[16397]: pam_unix(crond:session): session closed for user http
...

I want to see the log of this night, but there is no way. I have this problem for some days now and also tried to reboot, but then is still the issue, that the log disappear on 9:00 am. Could this be caused by a log rotating system? Or log size config option?

Thanks,
kabum

Last edited by kabum (2014-01-26 22:37:42)

lazork

Member

Registered: 2008-11-12

Posts: 30

Re: [Solved] journalctl output is truncated

I don't know why (it's not clear from the man page) but, at least for me, log entries are not listed chronologically by default.
Have you tried calling journalctl with some arguments, like:

journalctl -r

for reverse ordering?
Alternatively, you could output only the last lines:

journalctl -n 100

which again sorts entries by time.
Or maybe this is not related to your problem, in which case I'm sorry for not being helpful.

skanky

Member

From: WAIS

Registered: 2009-10-23

Posts: 1,847

Re: [Solved] journalctl output is truncated

Have you looked at /etc/systemd/journald.conf and compared the settings with man page for that file?
Try

which journalctl

to make sure there's no forgotten journalctl wrapper on your system (it's the sort if thing I've done in the past).

If not try a few journalctl options to see if there's a difference (-b -l etc.) as well as what lazork's suggested. It might give a clue.

---

"...one cannot be angry when one looks at a penguin."  - John Ruskin
"Life in general is a bit shit, and so too is the internet. And that's all there is." - scepticisle

kabum

Member

Registered: 2011-12-05

Posts: 6

Re: [Solved] journalctl output is truncated

Found the cause of this. THere was not sufficient storage left on the device.

This can be closed.