Arch Linux

nihraguk

Member

Registered: 2014-07-27

Posts: 2

[SOLVED] journald has stopped logging for applications

Hi everyone,

The logs from my various daemons (eg sshd, tor) have stopped showing up in journalctl. After 19 July 2014, my journalctl logs no longer contain those logs.

Only systemd and kernel messages show up in journalctl. Here is a sample of the output from journalctl -n 20:

[root@[redacted] ~]# journalctl -n 20
-- Logs begin at Mon 2014-06-09 10:46:55 SGT, end at Sun 2014-07-27 11:23:03 SGT. --
Jul 27 11:06:43 [redacted] systemd-logind[2202]: New session 170 of user nihraguk.
Jul 27 11:06:43 [redacted] systemd[1]: Started Session 170 of user nihraguk.
Jul 27 11:06:47 [redacted] systemd-logind[2202]: Removed session 170.
Jul 27 11:08:35 [redacted] systemd[1]: Stopping System Logger Daemon...
Jul 27 11:08:35 [redacted] systemd[1]: Starting System Logger Daemon...
Jul 27 11:08:35 [redacted] systemd[1]: Starting System Logger Daemon...
Jul 27 11:08:35 [redacted] systemd[1]: Started System Logger Daemon.
Jul 27 11:08:42 [redacted] systemd[1]: Reloading.
Jul 27 11:11:41 [redacted] systemd[1]: Stopping Journal Service...
Jul 27 11:11:41 [redacted] systemd-journal[21857]: Journal stopped
Jul 27 11:12:44 [redacted] systemd-journal[21965]: Runtime journal is using 8.0M (max allowed 99.6M, trying to leave 149.4M free of 987.0M available → current limit 99.6M).
Jul 27 11:12:44 [redacted] systemd-journald[21857]: Received SIGTERM from PID 1 (systemd).
Jul 27 11:12:44 [redacted] systemd-journal[21965]: Journal started
Jul 27 11:22:24 [redacted] systemd[1]: Stopping Journal Service...
Jul 27 11:22:24 [redacted] systemd-journal[21965]: Journal stopped
Jul 27 11:23:03 [redacted] systemd-journal[21990]: Permanent journal is using 336.0M (max allowed 4.0G, trying to leave 4.0G free of 35.7G available → current limit 4.0G).
Jul 27 11:23:03 [redacted] systemd-journal[21990]: Permanent journal is using 336.0M (max allowed 4.0G, trying to leave 4.0G free of 35.7G available → current limit 4.0G).
Jul 27 11:23:03 [redacted] systemd-journal[21990]: Time spent on flushing to /var is 3.512ms for 25 entries.
Jul 27 11:23:03 [redacted] systemd-journald[21965]: Received SIGTERM from PID 1 (systemd).
Jul 27 11:23:03 [redacted] systemd-journal[21990]: Journal started

Here is my /etc/systemd/journald.conf:

[Journal]
#Storage=auto
#Compress=yes
#Seal=yes
#SplitMode=uid
#SyncIntervalSec=5m
#RateLimitInterval=30s
#RateLimitBurst=1000
#SystemMaxUse=
#SystemKeepFree=
#SystemMaxFileSize=
#RuntimeMaxUse=
#RuntimeKeepFree=
#RuntimeMaxFileSize=
#MaxRetentionSec=
#MaxFileSec=1month
#ForwardToSyslog=yes
#ForwardToKMsg=no
#ForwardToConsole=no
#ForwardToWall=yes
#TTYPath=/dev/console
#MaxLevelStore=debug
#MaxLevelSyslog=debug
#MaxLevelKMsg=notice
#MaxLevelConsole=info
#MaxLevelWall=emerg

And here is the output of systemctl status systemd-journald:

● systemd-journald.service - Journal Service
   Loaded: loaded (/usr/lib/systemd/system/systemd-journald.service; static)
   Active: active (running) since Sun 2014-07-27 11:23:03 SGT; 16min ago
     Docs: man:systemd-journald.service(8)
           man:journald.conf(5)
 Main PID: 21990 (systemd-journal)
   Status: "Processing requests..."
   CGroup: /system.slice/systemd-journald.service
           └─21990 /usr/lib/systemd/systemd-journald

Jul 27 11:23:03 vulg.us systemd-journal[21990]: Permanent journal is using 336.0M (max allowed 4.0G, trying to leave 4.0G free of 35.7G available → current limit 4.0G).
Jul 27 11:23:03 vulg.us systemd-journal[21990]: Permanent journal is using 336.0M (max allowed 4.0G, trying to leave 4.0G free of 35.7G available → current limit 4.0G).
Jul 27 11:23:03 vulg.us systemd-journal[21990]: Time spent on flushing to /var is 3.512ms for 25 entries.
Jul 27 11:23:03 vulg.us systemd-journal[21990]: Journal started

Grateful for any pointers you guys can provide.

Last edited by nihraguk (2014-07-27 10:51:48)

sano

Member

Registered: 2012-02-11

Posts: 114

Re: [SOLVED] journald has stopped logging for applications

See this bug report and this thread on arch-general.

nihraguk

Member

Registered: 2014-07-27

Posts: 2

Re: [SOLVED] journald has stopped logging for applications

Those links were helpful! It turns out a simple reboot fixed it. Many thanks!