{"id":10681,"date":"2017-12-05T08:20:01","date_gmt":"2017-12-05T07:20:01","guid":{"rendered":"https:\/\/www.dbi-services.com\/blog\/no-journal-messages-available-before-the-last-reboot-of-your-centosrhel-system\/"},"modified":"2017-12-05T08:20:01","modified_gmt":"2017-12-05T07:20:01","slug":"no-journal-messages-available-before-the-last-reboot-of-your-centosrhel-system","status":"publish","type":"post","link":"https:\/\/www.dbi-services.com\/blog\/no-journal-messages-available-before-the-last-reboot-of-your-centosrhel-system\/","title":{"rendered":"No journal messages available before the last reboot of your CentOS\/RHEL system?"},"content":{"rendered":"<p>As you probably noticed RedHat as well as CentOS switched to <a href=\"https:\/\/www.freedesktop.org\/wiki\/Software\/systemd\/\" target=\"_blank\" rel=\"noopener\">systemd<\/a> with version 7 of their operating system release. This also means that instead of looking at \/var\/log\/messages you are supposed to use <a href=\"https:\/\/www.freedesktop.org\/software\/systemd\/man\/journalctl.html\" target=\"_blank\" rel=\"noopener\">journcalctl<\/a> to browse the messages of the operating system. One issue with that is that messages before the last reboot of your system will not be available, which is probably not want you want.<\/p>\n<p><!--more--><\/p>\n<p>Lets say I started my RedHat linux system just now:<\/p>\n<pre class=\"brush: bash; gutter: true; first-line: 1\">\nLast login: Tue Dec  5 09:12:34 2017 from 192.168.22.1\n[root@rhel7 ~]$ uptime\n 09:14:14 up 1 min,  1 user,  load average: 0.33, 0.15, 0.05\n[root@rhel7 ~]$ date\nDie Dez  5 09:14:15 CET 2017\n<\/pre>\n<p>Asking for any journal logs before that will not show anything:<\/p>\n<pre class=\"brush: bash; gutter: true; first-line: 1\">\n[root@rhel7 ~]$ journalctl --help  | grep \"--since\"\n  -S --since=DATE          Show entries not older than the specified date\n[root@rhel7 ~]$ journalctl --since \"2017-12-04 00:00:00\"\n-- Logs begin at Die 2017-12-05 09:13:07 CET, end at Die 2017-12-05 09:14:38 CET. --\nDez 05 09:13:07 rhel7.localdomain systemd-journal[86]: Runtime journal is using 6.2M (max allowed 49.6M, trying to \nDez 05 09:13:07 rhel7.localdomain kernel: Initializing cgroup subsys cpuset\nDez 05 09:13:07 rhel7.localdomain kernel: Initializing cgroup subsys cpu\nDez 05 09:13:07 rhel7.localdomain kernel: Initializing cgroup subsys cpuacct\n<\/pre>\n<p>Nothing for yesterday, which is bad. The issue here is the default configuration:<\/p>\n<pre class=\"brush: bash; gutter: true; first-line: 1; highlight: [16]\">\n[root@rhel7 ~]$ cat \/etc\/systemd\/journald.conf \n#  This file is part of systemd.\n#\n#  systemd is free software; you can redistribute it and\/or modify it\n#  under the terms of the GNU Lesser General Public License as published by\n#  the Free Software Foundation; either version 2.1 of the License, or\n#  (at your option) any later version.\n#\n# Entries in this file show the compile time defaults.\n# You can change settings by editing this file.\n# Defaults can be restored by simply deleting this file.\n#\n# See journald.conf(5) for details.\n\n[Journal]\n#Storage=auto\n#Compress=yes\n#Seal=yes\n#SplitMode=uid\n#SyncIntervalSec=5m\n#RateLimitInterval=30s\n#RateLimitBurst=1000\n#SystemMaxUse=\n#SystemKeepFree=\n#SystemMaxFileSize=\n#RuntimeMaxUse=\n#RuntimeKeepFree=\n#RuntimeMaxFileSize=\n#MaxRetentionSec=\n#MaxFileSec=1month\n#ForwardToSyslog=yes\n#ForwardToKMsg=no\n#ForwardToConsole=no\n#ForwardToWall=yes\n#TTYPath=\/dev\/console\n#MaxLevelStore=debug\n#MaxLevelSyslog=debug\n#MaxLevelKMsg=notice\n#MaxLevelConsole=info\n#MaxLevelWall=emerg\n<\/pre>\n<p>&#8220;Storage=auto&#8221; means that the journal will only be persistent if this directory exists (it does not in the default setup):<\/p>\n<pre class=\"brush: bash; gutter: true; first-line: 1\">\n[root@rhel7 ~]$ ls \/var\/log\/journal\nls: cannot access \/var\/log\/journal: No such file or directory\n<\/pre>\n<p>As soon as this is created and the service is restarted the journal will be persistent and will survive a reboot:<\/p>\n<pre class=\"brush: bash; gutter: true; first-line: 1\">\n[root@rhel7 ~]$ mkdir \/var\/log\/journal\n[root@rhel7 ~]$ systemctl restart systemd-journald.service\ntotal 4\ndrwxr-xr-x.  3 root root   46  5. Dez 09:15 .\ndrwxr-xr-x. 10 root root 4096  5. Dez 09:15 ..\ndrwxr-xr-x.  2 root root   28  5. Dez 09:15 a473db3bada14e478442d99da55345e0\n[root@rhel7 ~]$ ls -al \/var\/log\/journal\/a473db3bada14e478442d99da55345e0\/\ntotal 8192\ndrwxr-xr-x. 2 root root      28  5. Dez 09:15 .\ndrwxr-xr-x. 3 root root      46  5. Dez 09:15 ..\n-rw-r-----. 1 root root 8388608  5. Dez 09:15 system.journal\n<\/pre>\n<p>Of course you should look at the <a href=\"https:\/\/www.freedesktop.org\/software\/systemd\/man\/journald.conf.html\" target=\"_blank\" rel=\"noopener\">other parameters<\/a> that control the size of journal as well as rotation.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>As you probably noticed RedHat as well as CentOS switched to systemd with version 7 of their operating system release. This also means that instead of looking at \/var\/log\/messages you are supposed to use journcalctl to browse the messages of the operating system. One issue with that is that messages before the last reboot of [&hellip;]<\/p>\n","protected":false},"author":28,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[229],"tags":[73,1241],"type_dbi":[],"class_list":["post-10681","post","type-post","status-publish","format-standard","hentry","category-database-administration-monitoring","tag-linux","tag-systemd"],"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO Premium plugin v28.8 (Yoast SEO v28.8) - https:\/\/yoast.com\/product\/yoast-seo-premium-wordpress\/ -->\n<title>No journal messages available before the last reboot of your CentOS\/RHEL system? - dbi Blog<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.dbi-services.com\/blog\/no-journal-messages-available-before-the-last-reboot-of-your-centosrhel-system\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"No journal messages available before the last reboot of your CentOS\/RHEL system?\" \/>\n<meta property=\"og:description\" content=\"As you probably noticed RedHat as well as CentOS switched to systemd with version 7 of their operating system release. This also means that instead of looking at \/var\/log\/messages you are supposed to use journcalctl to browse the messages of the operating system. One issue with that is that messages before the last reboot of [&hellip;]\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.dbi-services.com\/blog\/no-journal-messages-available-before-the-last-reboot-of-your-centosrhel-system\/\" \/>\n<meta property=\"og:site_name\" content=\"dbi Blog\" \/>\n<meta property=\"article:published_time\" content=\"2017-12-05T07:20:01+00:00\" \/>\n<meta name=\"author\" content=\"Open source Team\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Open source Team\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"2 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/www.dbi-services.com\\\/blog\\\/no-journal-messages-available-before-the-last-reboot-of-your-centosrhel-system\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.dbi-services.com\\\/blog\\\/no-journal-messages-available-before-the-last-reboot-of-your-centosrhel-system\\\/\"},\"author\":{\"name\":\"Open source Team\",\"@id\":\"https:\\\/\\\/www.dbi-services.com\\\/blog\\\/#\\\/schema\\\/person\\\/4bae5e5dd8c7d48edbd948772b49b202\"},\"headline\":\"No journal messages available before the last reboot of your CentOS\\\/RHEL system?\",\"datePublished\":\"2017-12-05T07:20:01+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/www.dbi-services.com\\\/blog\\\/no-journal-messages-available-before-the-last-reboot-of-your-centosrhel-system\\\/\"},\"wordCount\":177,\"commentCount\":0,\"keywords\":[\"Linux\",\"systemd\"],\"articleSection\":[\"Database Administration &amp; Monitoring\"],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\\\/\\\/www.dbi-services.com\\\/blog\\\/no-journal-messages-available-before-the-last-reboot-of-your-centosrhel-system\\\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.dbi-services.com\\\/blog\\\/no-journal-messages-available-before-the-last-reboot-of-your-centosrhel-system\\\/\",\"url\":\"https:\\\/\\\/www.dbi-services.com\\\/blog\\\/no-journal-messages-available-before-the-last-reboot-of-your-centosrhel-system\\\/\",\"name\":\"No journal messages available before the last reboot of your CentOS\\\/RHEL system? - dbi Blog\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.dbi-services.com\\\/blog\\\/#website\"},\"datePublished\":\"2017-12-05T07:20:01+00:00\",\"author\":{\"@id\":\"https:\\\/\\\/www.dbi-services.com\\\/blog\\\/#\\\/schema\\\/person\\\/4bae5e5dd8c7d48edbd948772b49b202\"},\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.dbi-services.com\\\/blog\\\/no-journal-messages-available-before-the-last-reboot-of-your-centosrhel-system\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.dbi-services.com\\\/blog\\\/no-journal-messages-available-before-the-last-reboot-of-your-centosrhel-system\\\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.dbi-services.com\\\/blog\\\/no-journal-messages-available-before-the-last-reboot-of-your-centosrhel-system\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Accueil\",\"item\":\"https:\\\/\\\/www.dbi-services.com\\\/blog\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"No journal messages available before the last reboot of your CentOS\\\/RHEL system?\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.dbi-services.com\\\/blog\\\/#website\",\"url\":\"https:\\\/\\\/www.dbi-services.com\\\/blog\\\/\",\"name\":\"dbi Blog\",\"description\":\"\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/www.dbi-services.com\\\/blog\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/www.dbi-services.com\\\/blog\\\/#\\\/schema\\\/person\\\/4bae5e5dd8c7d48edbd948772b49b202\",\"name\":\"Open source Team\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/eb4fb12e386e8c41fdef0733e8114594cf2653e4f55e9fa2161442b8eaf3f657?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/eb4fb12e386e8c41fdef0733e8114594cf2653e4f55e9fa2161442b8eaf3f657?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/eb4fb12e386e8c41fdef0733e8114594cf2653e4f55e9fa2161442b8eaf3f657?s=96&d=mm&r=g\",\"caption\":\"Open source Team\"},\"url\":\"https:\\\/\\\/www.dbi-services.com\\\/blog\\\/author\\\/open-source-team\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"No journal messages available before the last reboot of your CentOS\/RHEL system? - dbi Blog","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.dbi-services.com\/blog\/no-journal-messages-available-before-the-last-reboot-of-your-centosrhel-system\/","og_locale":"en_US","og_type":"article","og_title":"No journal messages available before the last reboot of your CentOS\/RHEL system?","og_description":"As you probably noticed RedHat as well as CentOS switched to systemd with version 7 of their operating system release. This also means that instead of looking at \/var\/log\/messages you are supposed to use journcalctl to browse the messages of the operating system. One issue with that is that messages before the last reboot of [&hellip;]","og_url":"https:\/\/www.dbi-services.com\/blog\/no-journal-messages-available-before-the-last-reboot-of-your-centosrhel-system\/","og_site_name":"dbi Blog","article_published_time":"2017-12-05T07:20:01+00:00","author":"Open source Team","twitter_card":"summary_large_image","twitter_misc":{"Written by":"Open source Team","Est. reading time":"2 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.dbi-services.com\/blog\/no-journal-messages-available-before-the-last-reboot-of-your-centosrhel-system\/#article","isPartOf":{"@id":"https:\/\/www.dbi-services.com\/blog\/no-journal-messages-available-before-the-last-reboot-of-your-centosrhel-system\/"},"author":{"name":"Open source Team","@id":"https:\/\/www.dbi-services.com\/blog\/#\/schema\/person\/4bae5e5dd8c7d48edbd948772b49b202"},"headline":"No journal messages available before the last reboot of your CentOS\/RHEL system?","datePublished":"2017-12-05T07:20:01+00:00","mainEntityOfPage":{"@id":"https:\/\/www.dbi-services.com\/blog\/no-journal-messages-available-before-the-last-reboot-of-your-centosrhel-system\/"},"wordCount":177,"commentCount":0,"keywords":["Linux","systemd"],"articleSection":["Database Administration &amp; Monitoring"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/www.dbi-services.com\/blog\/no-journal-messages-available-before-the-last-reboot-of-your-centosrhel-system\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/www.dbi-services.com\/blog\/no-journal-messages-available-before-the-last-reboot-of-your-centosrhel-system\/","url":"https:\/\/www.dbi-services.com\/blog\/no-journal-messages-available-before-the-last-reboot-of-your-centosrhel-system\/","name":"No journal messages available before the last reboot of your CentOS\/RHEL system? - dbi Blog","isPartOf":{"@id":"https:\/\/www.dbi-services.com\/blog\/#website"},"datePublished":"2017-12-05T07:20:01+00:00","author":{"@id":"https:\/\/www.dbi-services.com\/blog\/#\/schema\/person\/4bae5e5dd8c7d48edbd948772b49b202"},"breadcrumb":{"@id":"https:\/\/www.dbi-services.com\/blog\/no-journal-messages-available-before-the-last-reboot-of-your-centosrhel-system\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.dbi-services.com\/blog\/no-journal-messages-available-before-the-last-reboot-of-your-centosrhel-system\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/www.dbi-services.com\/blog\/no-journal-messages-available-before-the-last-reboot-of-your-centosrhel-system\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Accueil","item":"https:\/\/www.dbi-services.com\/blog\/"},{"@type":"ListItem","position":2,"name":"No journal messages available before the last reboot of your CentOS\/RHEL system?"}]},{"@type":"WebSite","@id":"https:\/\/www.dbi-services.com\/blog\/#website","url":"https:\/\/www.dbi-services.com\/blog\/","name":"dbi Blog","description":"","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.dbi-services.com\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/www.dbi-services.com\/blog\/#\/schema\/person\/4bae5e5dd8c7d48edbd948772b49b202","name":"Open source Team","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/eb4fb12e386e8c41fdef0733e8114594cf2653e4f55e9fa2161442b8eaf3f657?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/eb4fb12e386e8c41fdef0733e8114594cf2653e4f55e9fa2161442b8eaf3f657?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/eb4fb12e386e8c41fdef0733e8114594cf2653e4f55e9fa2161442b8eaf3f657?s=96&d=mm&r=g","caption":"Open source Team"},"url":"https:\/\/www.dbi-services.com\/blog\/author\/open-source-team\/"}]}},"_links":{"self":[{"href":"https:\/\/www.dbi-services.com\/blog\/wp-json\/wp\/v2\/posts\/10681","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.dbi-services.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.dbi-services.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.dbi-services.com\/blog\/wp-json\/wp\/v2\/users\/28"}],"replies":[{"embeddable":true,"href":"https:\/\/www.dbi-services.com\/blog\/wp-json\/wp\/v2\/comments?post=10681"}],"version-history":[{"count":0,"href":"https:\/\/www.dbi-services.com\/blog\/wp-json\/wp\/v2\/posts\/10681\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.dbi-services.com\/blog\/wp-json\/wp\/v2\/media?parent=10681"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.dbi-services.com\/blog\/wp-json\/wp\/v2\/categories?post=10681"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.dbi-services.com\/blog\/wp-json\/wp\/v2\/tags?post=10681"},{"taxonomy":"type","embeddable":true,"href":"https:\/\/www.dbi-services.com\/blog\/wp-json\/wp\/v2\/type_dbi?post=10681"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}