课程: Linux: Kernels and Logging for System Administration

免费学习该课程！

今天就开通帐号，24,700 门业界名师课程任您挑！

Retrieve systemd journal

Retrieve systemd journal - Linux教程

课程: Linux: Kernels and Logging for System Administration

开始一个月试用 购买团队方案

Retrieve systemd journal

“

- [Presenter] There are times when a server disc crashes, and we need to read data from the recovered drive. For normal logging with Rsyslog or other equivalents, it's easy. We can just mount the recovered drive in our file system, and use grep to find what we want. This works because sys log messages are text files. However, the system deed journal is binary, so we can't do this. In order for us to access journals from a recovered system, they need to be persistent. First, you need to make sure your journal is persistent by creating a /var/log/journal directory. After restarting the systemd-journald service, it creates a directory n/var/log/journal, named with a UUID. This is different for each system. When you use journalctl, it automatically reads the journal at /var/log/journal, and then the directory named with your UUID. Inside that directory, it can be one or more journals depending on other factors like the number of users. If you restore a journal from a recovered system with…

内容