[{"data":1,"prerenderedAt":539},["ShallowReactive",2],{"wiki-/wiki/diagnostics/journalctl":3},{"id":4,"title":5,"body":6,"description":530,"extension":531,"meta":532,"navigation":533,"path":534,"section":535,"seo":536,"stem":537,"__hash__":538},"wiki/wiki/diagnostics/journalctl.md","journalctl: системные логи",{"type":7,"value":8,"toc":519},"minimark",[9,21,27,30,35,42,46,65,69,79,83,90,107,110,136,139,156,159,194,197,212,215,229,232,252,255,271,274,300,304,307,315,318,322,332,338,350,353,365,374,378,395,400,431,469,482,486,497,501,515],[10,11,12,16,17,20],"p",{},[13,14,15],"strong",{},"Время:"," 5 мин · ",[13,18,19],{},"Сложность:"," ★☆☆☆☆",[10,22,23,26],{},[13,24,25],{},"Подходит:"," ✓ Ubuntu 22.04 · ✓ Debian 12 · ✓ AlmaLinux 9",[28,29],"hr",{},[31,32,34],"h2",{"id":33},"краткое-описание","Краткое описание",[10,36,37,41],{},[38,39,40],"code",{},"journalctl"," — инструмент для чтения журналов systemd. Хранит логи всех сервисов, ядра и загрузки. Позволяет фильтровать по сервису, времени и уровню важности.",[31,43,45],{"id":44},"когда-пригодится","Когда пригодится",[47,48,49,53,56,59,62],"ul",{},[50,51,52],"li",{},"Сервис упал — найти причину в логах",[50,54,55],{},"Отладка конфигурации nginx, apache, postgresql",[50,57,58],{},"Мониторинг ошибок SSH",[50,60,61],{},"Диагностика проблем при загрузке системы",[50,63,64],{},"Проверить, что происходило на сервере в определённое время",[31,66,68],{"id":67},"что-понадобится","Что понадобится",[47,70,71,74],{},[50,72,73],{},"Доступ к терминалу",[50,75,76,78],{},[38,77,40],{}," входит в systemd, установка не нужна",[31,80,82],{"id":81},"пошаговая-инструкция","Пошаговая инструкция",[10,84,85,86,89],{},"Все логи — листать стрелками, выйти через ",[38,87,88],{},"q",":",[91,92,97],"pre",{"className":93,"code":94,"language":95,"meta":96,"style":96},"language-bash shiki shiki-themes material-theme-lighter material-theme material-theme-palenight","journalctl\n","bash","",[38,98,99],{"__ignoreMap":96},[100,101,104],"span",{"class":102,"line":103},"line",1,[100,105,94],{"class":106},"sBMFI",[10,108,109],{},"Логи конкретного сервиса:",[91,111,113],{"className":93,"code":112,"language":95,"meta":96,"style":96},"journalctl -u nginx\njournalctl -u sshd\n",[38,114,115,126],{"__ignoreMap":96},[100,116,117,119,123],{"class":102,"line":103},[100,118,40],{"class":106},[100,120,122],{"class":121},"sfazB"," -u",[100,124,125],{"class":121}," nginx\n",[100,127,129,131,133],{"class":102,"line":128},2,[100,130,40],{"class":106},[100,132,122],{"class":121},[100,134,135],{"class":121}," sshd\n",[10,137,138],{},"Следить за новыми записями в реальном времени:",[91,140,142],{"className":93,"code":141,"language":95,"meta":96,"style":96},"journalctl -u nginx -f\n",[38,143,144],{"__ignoreMap":96},[100,145,146,148,150,153],{"class":102,"line":103},[100,147,40],{"class":106},[100,149,122],{"class":121},[100,151,152],{"class":121}," nginx",[100,154,155],{"class":121}," -f\n",[10,157,158],{},"Логи с определённого времени:",[91,160,162],{"className":93,"code":161,"language":95,"meta":96,"style":96},"journalctl --since \"2024-01-15 10:00:00\"\njournalctl --since \"1 hour ago\"\n",[38,163,164,181],{"__ignoreMap":96},[100,165,166,168,171,175,178],{"class":102,"line":103},[100,167,40],{"class":106},[100,169,170],{"class":121}," --since",[100,172,174],{"class":173},"sMK4o"," \"",[100,176,177],{"class":121},"2024-01-15 10:00:00",[100,179,180],{"class":173},"\"\n",[100,182,183,185,187,189,192],{"class":102,"line":128},[100,184,40],{"class":106},[100,186,170],{"class":121},[100,188,174],{"class":173},[100,190,191],{"class":121},"1 hour ago",[100,193,180],{"class":173},[10,195,196],{},"Только ошибки и выше:",[91,198,200],{"className":93,"code":199,"language":95,"meta":96,"style":96},"journalctl -p err\n",[38,201,202],{"__ignoreMap":96},[100,203,204,206,209],{"class":102,"line":103},[100,205,40],{"class":106},[100,207,208],{"class":121}," -p",[100,210,211],{"class":121}," err\n",[10,213,214],{},"Предупреждения и выше:",[91,216,218],{"className":93,"code":217,"language":95,"meta":96,"style":96},"journalctl -p warning\n",[38,219,220],{"__ignoreMap":96},[100,221,222,224,226],{"class":102,"line":103},[100,223,40],{"class":106},[100,225,208],{"class":121},[100,227,228],{"class":121}," warning\n",[10,230,231],{},"Последние 100 строк сервиса:",[91,233,235],{"className":93,"code":234,"language":95,"meta":96,"style":96},"journalctl -u nginx -n 100\n",[38,236,237],{"__ignoreMap":96},[100,238,239,241,243,245,248],{"class":102,"line":103},[100,240,40],{"class":106},[100,242,122],{"class":121},[100,244,152],{"class":121},[100,246,247],{"class":121}," -n",[100,249,251],{"class":250},"sbssI"," 100\n",[10,253,254],{},"Вывод без постраничной прокрутки (удобно для grep):",[91,256,258],{"className":93,"code":257,"language":95,"meta":96,"style":96},"journalctl -u nginx --no-pager\n",[38,259,260],{"__ignoreMap":96},[100,261,262,264,266,268],{"class":102,"line":103},[100,263,40],{"class":106},[100,265,122],{"class":121},[100,267,152],{"class":121},[100,269,270],{"class":121}," --no-pager\n",[10,272,273],{},"Комбинировать фильтры — ошибки nginx за последний час:",[91,275,277],{"className":93,"code":276,"language":95,"meta":96,"style":96},"journalctl -u nginx -p err --since \"1 hour ago\"\n",[38,278,279],{"__ignoreMap":96},[100,280,281,283,285,287,289,292,294,296,298],{"class":102,"line":103},[100,282,40],{"class":106},[100,284,122],{"class":121},[100,286,152],{"class":121},[100,288,208],{"class":121},[100,290,291],{"class":121}," err",[100,293,170],{"class":121},[100,295,174],{"class":173},[100,297,191],{"class":121},[100,299,180],{"class":173},[31,301,303],{"id":302},"проверка-результата","Проверка результата",[10,305,306],{},"Пример вывода:",[91,308,313],{"className":309,"code":311,"language":312},[310],"language-text","Jan 15 10:23:41 myserver nginx[12345]: 2024/01/15 10:23:41 [error] 12345#0: *1 open() \"/var/www/html/missing.html\" failed (2: No such file or directory)\nJan 15 10:23:42 myserver sshd[12346]: Failed password for invalid user admin from 1.2.3.4 port 54321 ssh2\n","text",[38,314,311],{"__ignoreMap":96},[10,316,317],{},"Каждая строка содержит: дата и время, имя хоста, сервис с PID, сообщение.",[31,319,321],{"id":320},"возможные-ошибки","Возможные ошибки",[10,323,324,327,328,331],{},[13,325,326],{},"Логи не отображаются для сервиса"," — проверьте правильное имя: ",[38,329,330],{},"systemctl list-units --type=service | grep имя",".",[10,333,334,337],{},[13,335,336],{},"journalctl занимает много места на диске"," — очистить, оставив не более 500 МБ:",[91,339,341],{"className":93,"code":340,"language":95,"meta":96,"style":96},"journalctl --vacuum-size=500M\n",[38,342,343],{"__ignoreMap":96},[100,344,345,347],{"class":102,"line":103},[100,346,40],{"class":106},[100,348,349],{"class":121}," --vacuum-size=500M\n",[10,351,352],{},"Удалить логи старше 30 дней:",[91,354,356],{"className":93,"code":355,"language":95,"meta":96,"style":96},"journalctl --vacuum-time=30d\n",[38,357,358],{"__ignoreMap":96},[100,359,360,362],{"class":102,"line":103},[100,361,40],{"class":106},[100,363,364],{"class":121}," --vacuum-time=30d\n",[10,366,367,370,371,331],{},[13,368,369],{},"Permission denied"," — запустите через ",[38,372,373],{},"sudo journalctl",[31,375,377],{"id":376},"faq","FAQ",[10,379,380,383,384,387,388,391,392,331],{},[13,381,382],{},"Где физически хранятся логи?","\nВ ",[38,385,386],{},"/var/log/journal/"," (если включено постоянное хранение) или в ",[38,389,390],{},"/run/log/journal/"," (только до перезагрузки). Проверить настройку: ",[38,393,394],{},"cat /etc/systemd/journald.conf | grep Storage",[10,396,397],{},[13,398,399],{},"Как сохранить логи в файл для отправки в поддержку?",[91,401,403],{"className":93,"code":402,"language":95,"meta":96,"style":96},"journalctl -u nginx --since \"1 hour ago\" --no-pager > nginx-logs.txt\n",[38,404,405],{"__ignoreMap":96},[100,406,407,409,411,413,415,417,419,422,425,428],{"class":102,"line":103},[100,408,40],{"class":106},[100,410,122],{"class":121},[100,412,152],{"class":121},[100,414,170],{"class":121},[100,416,174],{"class":173},[100,418,191],{"class":121},[100,420,421],{"class":173},"\"",[100,423,424],{"class":121}," --no-pager",[100,426,427],{"class":173}," >",[100,429,430],{"class":121}," nginx-logs.txt\n",[10,432,433,436,439,440,439,443,439,446,439,449,439,452,439,455,439,458,461,462,465,466,468],{},[13,434,435],{},"Какие уровни логирования есть?",[38,437,438],{},"emerg",", ",[38,441,442],{},"alert",[38,444,445],{},"crit",[38,447,448],{},"err",[38,450,451],{},"warning",[38,453,454],{},"notice",[38,456,457],{},"info",[38,459,460],{},"debug",". При ",[38,463,464],{},"-p err"," показываются уровни ",[38,467,448],{}," и выше.",[10,470,471,474,477,478,481],{},[13,472,473],{},"Как посмотреть логи предыдущей загрузки?",[38,475,476],{},"journalctl -b -1"," — логи предыдущей загрузки. ",[38,479,480],{},"journalctl -b -2"," — позапрошлой.",[31,483,485],{"id":484},"полезные-ссылки","Полезные ссылки",[47,487,488],{},[50,489,490],{},[491,492,496],"a",{"href":493,"rel":494},"https://www.freedesktop.org/software/systemd/man/journalctl.html",[495],"nofollow","man journalctl",[31,498,500],{"id":499},"следующие-статьи","Следующие статьи",[47,502,503,509],{},[50,504,505],{},[491,506,508],{"href":507},"/wiki/diagnostics/htop","htop: мониторинг процессов",[50,510,511],{},[491,512,514],{"href":513},"/wiki/diagnostics/df","df: проверка дискового пространства",[516,517,518],"style",{},"html pre.shiki code .sBMFI, html code.shiki .sBMFI{--shiki-light:#E2931D;--shiki-default:#FFCB6B;--shiki-dark:#FFCB6B}html .light .shiki span {color: var(--shiki-light);background: var(--shiki-light-bg);font-style: var(--shiki-light-font-style);font-weight: var(--shiki-light-font-weight);text-decoration: var(--shiki-light-text-decoration);}html.light .shiki span {color: var(--shiki-light);background: var(--shiki-light-bg);font-style: var(--shiki-light-font-style);font-weight: var(--shiki-light-font-weight);text-decoration: var(--shiki-light-text-decoration);}html .default .shiki span {color: var(--shiki-default);background: var(--shiki-default-bg);font-style: var(--shiki-default-font-style);font-weight: var(--shiki-default-font-weight);text-decoration: var(--shiki-default-text-decoration);}html .shiki span {color: var(--shiki-default);background: var(--shiki-default-bg);font-style: var(--shiki-default-font-style);font-weight: var(--shiki-default-font-weight);text-decoration: var(--shiki-default-text-decoration);}html .dark .shiki span {color: var(--shiki-dark);background: var(--shiki-dark-bg);font-style: var(--shiki-dark-font-style);font-weight: var(--shiki-dark-font-weight);text-decoration: var(--shiki-dark-text-decoration);}html.dark .shiki span {color: var(--shiki-dark);background: var(--shiki-dark-bg);font-style: var(--shiki-dark-font-style);font-weight: var(--shiki-dark-font-weight);text-decoration: var(--shiki-dark-text-decoration);}html pre.shiki code .sfazB, html code.shiki .sfazB{--shiki-light:#91B859;--shiki-default:#C3E88D;--shiki-dark:#C3E88D}html pre.shiki code .sMK4o, html code.shiki .sMK4o{--shiki-light:#39ADB5;--shiki-default:#89DDFF;--shiki-dark:#89DDFF}html pre.shiki code .sbssI, html code.shiki .sbssI{--shiki-light:#F76D47;--shiki-default:#F78C6C;--shiki-dark:#F78C6C}",{"title":96,"searchDepth":128,"depth":128,"links":520},[521,522,523,524,525,526,527,528,529],{"id":33,"depth":128,"text":34},{"id":44,"depth":128,"text":45},{"id":67,"depth":128,"text":68},{"id":81,"depth":128,"text":82},{"id":302,"depth":128,"text":303},{"id":320,"depth":128,"text":321},{"id":376,"depth":128,"text":377},{"id":484,"depth":128,"text":485},{"id":499,"depth":128,"text":500},"Как читать системные логи через journalctl и фильтровать по сервису, времени или уровню.","md",{},true,"/wiki/diagnostics/journalctl","Диагностика",{"title":5,"description":530},"wiki/diagnostics/journalctl","KSYJO8ikmhq8k0eSbYXNW3mwg9OrqcMoE6HjljhZQPw",1788285515910]