Bug#967945: systemd is way too aggressive in deleting journals of yesterday

Harald Dunkel harald.dunkel at aixigo.com
Thu Aug 6 16:34:53 BST 2020


On 8/5/20 4:46 PM, Chris Hofstaedtler wrote:
> 
> More important: how large is your journal directory now?
> 
> Chris
> 

Sorry, my bad.

Currently its

# du -ksh /var/log/journal/
913M    /var/log/journal/

# ls -al /var/log/journal/
total 56
drwxr-sr-x+  3 root systemd-journal  4096 Jan 13  2016 .
drwxr-xr-x  20 root root            12288 Aug  6 00:00 ..
drwxr-sr-x+  2 root systemd-journal 36864 Aug  6 16:48 42b7d4373eff9fb16ebd59084afbff3f

# ls -al /var/log/journal/42b7d4373eff9fb16ebd59084afbff3f
total 933936
drwxr-sr-x+ 2 root systemd-journal    36864 Aug  6 16:48 .
drwxr-sr-x+ 3 root systemd-journal     4096 Jan 13  2016 ..
-rw-r-----+ 1 root systemd-journal 25165824 Aug  6 17:33 system.journal
-rw-r-----+ 1 root systemd-journal  8388608 Aug  6 16:00 user-1002.journal
-rw-r-----+ 1 root systemd-journal  8388608 Aug  6 16:00 user-1014.journal
-rw-r-----+ 1 root systemd-journal  8388608 Aug  6 16:00 user-1021.journal
-rw-r-----+ 1 root systemd-journal  8388608 Aug  6 16:00 user-1022.journal
-rw-r-----+ 1 root systemd-journal  8388608 Aug  6 17:25 user-1032.journal
-rw-r-----+ 1 root systemd-journal  8388608 Aug  6 16:00 user-1045.journal
-rw-r-----+ 1 root systemd-journal  8388608 Aug  6 17:25 user-1046.journal
-rw-r-----+ 1 root systemd-journal  8388608 Aug  6 16:15 user-1051.journal
-rw-r-----+ 1 root systemd-journal  8388608 Aug  6 16:00 user-1053.journal
-rw-r-----+ 1 root systemd-journal  8388608 Aug  6 16:40 user-1055.journal
-rw-r-----+ 1 root systemd-journal  8388608 Aug  6 16:00 user-1056.journal
-rw-r-----+ 1 root systemd-journal  8388608 Aug  6 16:50 user-1061.journal
-rw-r-----+ 1 root systemd-journal  8388608 Aug  6 16:00 user-1064.journal
-rw-r-----+ 1 root systemd-journal  8388608 Aug  6 16:00 user-1065.journal
-rw-r-----+ 1 root systemd-journal  8388608 Aug  6 16:00 user-1066.journal
-rw-r-----+ 1 root systemd-journal  8388608 Aug  6 16:00 user-1067.journal
-rw-r-----+ 1 root systemd-journal  8388608 Aug  6 16:00 user-1069.journal
-rw-r-----+ 1 root systemd-journal  8388608 Aug  6 16:00 user-1071.journal
-rw-r-----+ 1 root systemd-journal  8388608 Aug  6 16:00 user-1075.journal
-rw-r-----+ 1 root systemd-journal  8388608 Aug  6 16:00 user-1076.journal
-rw-r-----+ 1 root systemd-journal  8388608 Aug  6 16:00 user-1077.journal
-rw-r-----+ 1 root systemd-journal  8388608 Aug  6 16:00 user-1079.journal
-rw-r-----+ 1 root systemd-journal  8388608 Aug  6 16:00 user-1080.journal
-rw-r-----+ 1 root systemd-journal  8388608 Aug  6 16:00 user-1086.journal
-rw-r-----+ 1 root systemd-journal  8388608 Aug  6 16:00 user-1092.journal
-rw-r-----+ 1 root systemd-journal  8388608 Aug  6 16:30 user-1109.journal
-rw-r-----+ 1 root systemd-journal  8388608 Aug  6 16:00 user-1111.journal
-rw-r-----+ 1 root systemd-journal  8388608 Aug  6 16:00 user-1123.journal
-rw-r-----+ 1 root systemd-journal  8388608 Aug  6 16:40 user-1127.journal
-rw-r-----+ 1 root systemd-journal  8388608 Aug  6 16:00 user-1128.journal
-rw-r-----+ 1 root systemd-journal  8388608 Aug  6 16:00 user-1130.journal
-rw-r-----+ 1 root systemd-journal  8388608 Aug  6 16:00 user-1132.journal
-rw-r-----+ 1 root systemd-journal  8388608 Aug  6 16:30 user-1133.journal
-rw-r-----+ 1 root systemd-journal  8388608 Aug  6 16:00 user-1135.journal
-rw-r-----+ 1 root systemd-journal  8388608 Aug  6 16:00 user-1138.journal
-rw-r-----+ 1 root systemd-journal  8388608 Aug  6 16:00 user-1139.journal
-rw-r-----+ 1 root systemd-journal  8388608 Aug  6 16:00 user-1158.journal
-rw-r-----+ 1 root systemd-journal  8388608 Aug  6 16:00 user-1159.journal
-rw-r-----+ 1 root systemd-journal  8388608 Aug  6 16:00 user-1168.journal
-rw-r-----+ 1 root systemd-journal  8388608 Aug  6 16:00 user-1175.journal
-rw-r-----+ 1 root systemd-journal  8388608 Aug  6 16:00 user-1179.journal
-rw-r-----+ 1 root systemd-journal  8388608 Aug  6 16:00 user-1188.journal
-rw-r-----+ 1 root systemd-journal  8388608 Aug  6 16:00 user-1189.journal
-rw-r-----+ 1 root systemd-journal  8388608 Aug  6 16:30 user-1190.journal
-rw-r-----+ 1 root systemd-journal  8388608 Aug  6 16:00 user-1192.journal
-rw-r-----+ 1 root systemd-journal  8388608 Aug  6 16:00 user-1193.journal
-rw-r-----+ 1 root systemd-journal  8388608 Aug  6 16:00 user-1199.journal
-rw-r-----+ 1 root systemd-journal  8388608 Aug  6 16:00 user-1200.journal
-rw-r-----+ 1 root systemd-journal  8388608 Aug  6 16:00 user-1201.journal
-rw-r-----+ 1 root systemd-journal  8388608 Aug  6 16:00 user-1202.journal
-rw-r-----+ 1 root systemd-journal  8388608 Aug  6 16:00 user-1203.journal
-rw-r-----+ 1 root systemd-journal  8388608 Aug  6 16:00 user-1204.journal
-rw-r-----+ 1 root systemd-journal  8388608 Aug  6 16:00 user-1206.journal
-rw-r-----+ 1 root systemd-journal  8388608 Aug  6 16:00 user-1207.journal
-rw-r-----+ 1 root systemd-journal  8388608 Aug  6 16:00 user-1210.journal
-rw-r-----+ 1 root systemd-journal  8388608 Aug  6 16:00 user-1211.journal
-rw-r-----+ 1 root systemd-journal  8388608 Aug  6 16:00 user-1225.journal
-rw-r-----+ 1 root systemd-journal  8388608 Aug  6 16:00 user-1226.journal
-rw-r-----+ 1 root systemd-journal  8388608 Aug  6 16:00 user-1229.journal
-rw-r-----+ 1 root systemd-journal  8388608 Aug  6 16:00 user-1231.journal
-rw-r-----+ 1 root systemd-journal  8388608 Aug  6 16:00 user-1232.journal
-rw-r-----+ 1 root systemd-journal  8388608 Aug  6 16:00 user-1233.journal
-rw-r-----+ 1 root systemd-journal  8388608 Aug  6 16:00 user-1234.journal
-rw-r-----+ 1 root systemd-journal  8388608 Aug  6 16:00 user-1235.journal
-rw-r-----+ 1 root systemd-journal  8388608 Aug  6 16:00 user-1236.journal
-rw-r-----+ 1 root systemd-journal  8388608 Aug  6 16:00 user-1240.journal
-rw-r-----+ 1 root systemd-journal  8388608 Aug  6 16:00 user-1243.journal
-rw-r-----+ 1 root systemd-journal  8388608 Aug  6 17:25 user-1246.journal
-rw-r-----+ 1 root systemd-journal  8388608 Aug  6 16:00 user-1249.journal
-rw-r-----+ 1 root systemd-journal  8388608 Aug  6 16:00 user-1252.journal
-rw-r-----+ 1 root systemd-journal  8388608 Aug  6 16:00 user-1253.journal
-rw-r-----+ 1 root systemd-journal  8388608 Aug  6 16:00 user-1254.journal
-rw-r-----+ 1 root systemd-journal  8388608 Aug  6 16:00 user-1255.journal
-rw-r-----+ 1 root systemd-journal  8388608 Aug  6 16:00 user-1257.journal
-rw-r-----+ 1 root systemd-journal  8388608 Aug  6 16:00 user-1259.journal
-rw-r-----+ 1 root systemd-journal  8388608 Aug  6 16:00 user-1260.journal
-rw-r-----+ 1 root systemd-journal  8388608 Aug  6 16:00 user-1261.journal
-rw-r-----+ 1 root systemd-journal  8388608 Aug  6 16:00 user-1263.journal
-rw-r-----+ 1 root systemd-journal  8388608 Aug  6 16:00 user-1265.journal
-rw-r-----+ 1 root systemd-journal  8388608 Aug  6 16:00 user-1266.journal
-rw-r-----+ 1 root systemd-journal  8388608 Aug  6 16:00 user-1267.journal
-rw-r-----+ 1 root systemd-journal  8388608 Aug  6 16:00 user-1270.journal
-rw-r-----+ 1 root systemd-journal  8388608 Aug  6 16:00 user-1272.journal
-rw-r-----+ 1 root systemd-journal  8388608 Aug  6 16:00 user-1273.journal
-rw-r-----+ 1 root systemd-journal  8388608 Aug  6 16:00 user-1275.journal
-rw-r-----+ 1 root systemd-journal  8388608 Aug  6 16:00 user-1276.journal
-rw-r-----+ 1 root systemd-journal  8388608 Aug  6 16:00 user-1277.journal
-rw-r-----+ 1 root systemd-journal  8388608 Aug  6 16:00 user-1278.journal
-rw-r-----+ 1 root systemd-journal  8388608 Aug  6 16:00 user-1279.journal
-rw-r-----+ 1 root systemd-journal  8388608 Aug  6 16:00 user-1280.journal
-rw-r-----+ 1 root systemd-journal  8388608 Aug  6 16:00 user-1284.journal
-rw-r-----+ 1 root systemd-journal  8388608 Aug  6 16:00 user-1285.journal
-rw-r-----+ 1 root systemd-journal  8388608 Aug  6 16:00 user-1286.journal
-rw-r-----+ 1 root systemd-journal  8388608 Aug  6 16:00 user-1287.journal
-rw-r-----+ 1 root systemd-journal  8388608 Aug  6 16:00 user-1289.journal
-rw-r-----+ 1 root systemd-journal  8388608 Aug  6 16:00 user-1290.journal
-rw-r-----+ 1 root systemd-journal  8388608 Aug  6 16:00 user-1292.journal
-rw-r-----+ 1 root systemd-journal  8388608 Aug  6 16:00 user-1293.journal
-rw-r-----+ 1 root systemd-journal  8388608 Aug  6 16:00 user-1294.journal
-rw-r-----+ 1 root systemd-journal  8388608 Aug  6 16:00 user-1296.journal
-rw-r-----+ 1 root systemd-journal  8388608 Aug  6 16:00 user-1300.journal
-rw-r-----+ 1 root systemd-journal  8388608 Aug  6 16:00 user-1303.journal
-rw-r-----+ 1 root systemd-journal  8388608 Aug  6 16:00 user-1304.journal
-rw-r-----+ 1 root systemd-journal  8388608 Aug  6 16:00 user-1306.journal
-rw-r-----+ 1 root systemd-journal  8388608 Aug  6 16:00 user-1307.journal
-rw-r-----+ 1 root systemd-journal  8388608 Aug  6 16:00 user-1308.journal
-rw-r-----+ 1 root systemd-journal  8388608 Aug  6 16:00 user-1309.journal
-rw-r-----+ 1 root systemd-journal  8388608 Aug  6 16:00 user-1310.journal
-rw-r-----+ 1 root systemd-journal  8388608 Aug  6 16:00 user-1313.journal
-rw-r-----+ 1 root systemd-journal  8388608 Aug  6 16:00 user-1314.journal
-rw-r-----+ 1 root systemd-journal  8388608 Aug  6 16:00 user-6502.journal


Problem is, journalctl gives me just the journal of today. The last few days
are lost.


Regards
Harri



More information about the Pkg-systemd-maintainers mailing list