man/journald.conf.xml

   1 <?xml version='1.0'?> <!--*-nxml-*-->
   2 <!DOCTYPE refentry PUBLIC "-//OASIS//DTD DocBook XML V4.2//EN"
   3   "http://www.oasis-open.org/docbook/xml/4.2/docbookx.dtd">
   4
   5 <!--
   6   This file is part of systemd.
   7
   8   Copyright 2010 Lennart Poettering
   9
  10   systemd is free software; you can redistribute it and/or modify it
  11   under the terms of the GNU Lesser General Public License as published by
  12   the Free Software Foundation; either version 2.1 of the License, or
  13   (at your option) any later version.
  14
  15   systemd is distributed in the hope that it will be useful, but
  16   WITHOUT ANY WARRANTY; without even the implied warranty of
  17   MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
  18   Lesser General Public License for more details.
  19
  20   You should have received a copy of the GNU Lesser General Public License
  21   along with systemd; If not, see <http://www.gnu.org/licenses/>.
  22 -->
  23
  24 <refentry id="journald.conf"
  25     xmlns:xi="http://www.w3.org/2001/XInclude">
  26   <refentryinfo>
  27     <title>journald.conf</title>
  28     <productname>systemd</productname>
  29
  30     <authorgroup>
  31       <author>
  32         <contrib>Developer</contrib>
  33         <firstname>Lennart</firstname>
  34         <surname>Poettering</surname>
  35         <email>lennart@poettering.net</email>
  36       </author>
  37     </authorgroup>
  38   </refentryinfo>
  39
  40   <refmeta>
  41     <refentrytitle>journald.conf</refentrytitle>
  42     <manvolnum>5</manvolnum>
  43   </refmeta>
  44
  45   <refnamediv>
  46     <refname>journald.conf</refname>
  47     <refname>journald.conf.d</refname>
  48     <refpurpose>Journal service configuration files</refpurpose>
  49   </refnamediv>
  50
  51   <refsynopsisdiv>
  52     <para><filename>/etc/systemd/journald.conf</filename></para>
  53     <para><filename>/etc/systemd/journald.conf.d/*.conf</filename></para>
  54     <para><filename>/run/systemd/journald.conf.d/*.conf</filename></para>
  55     <para><filename>/usr/lib/systemd/journald.conf.d/*.conf</filename></para>
  56   </refsynopsisdiv>
  57
  58   <refsect1>
  59     <title>Description</title>
  60
  61     <para>These files configure various parameters of the systemd
  62     journal service,
  63     <citerefentry><refentrytitle>systemd-journald.service</refentrytitle><manvolnum>8</manvolnum></citerefentry>.</para>
  64
  65   </refsect1>
  66
  67   <xi:include href="standard-conf.xml" xpointer="main-conf" />
  68
  69   <refsect1>
  70     <title>Options</title>
  71
  72     <para>All options are configured in the
  73     <literal>[Journal]</literal> section:</para>
  74
  75     <variablelist>
  76
  77       <varlistentry>
  78         <term><varname>Storage=</varname></term>
  79
  80         <listitem><para>Controls where to store journal data. One of
  81         <literal>volatile</literal>,
  82         <literal>persistent</literal>,
  83         <literal>auto</literal> and
  84         <literal>none</literal>. If
  85         <literal>volatile</literal>, journal
  86         log data will be stored only in memory, i.e. below the
  87         <filename>/run/log/journal</filename> hierarchy (which is
  88         created if needed). If <literal>persistent</literal>, data
  89         will be stored preferably on disk, i.e. below the
  90         <filename>/var/log/journal</filename> hierarchy (which is
  91         created if needed), with a fallback to
  92         <filename>/run/log/journal</filename> (which is created if
  93         needed), during early boot and if the disk is not writable.
  94         <literal>auto</literal> is similar to
  95         <literal>persistent</literal> but the directory
  96         <filename>/var/log/journal</filename> is not created if
  97         needed, so that its existence controls where log data goes.
  98         <literal>none</literal> turns off all storage, all log data
  99         received will be dropped. Forwarding to other targets, such as
 100         the console, the kernel log buffer or a syslog daemon will
 101         still work however. Defaults to
 102         <literal>auto</literal>.</para></listitem>
 103       </varlistentry>
 104
 105       <varlistentry>
 106         <term><varname>Compress=</varname></term>
 107
 108         <listitem><para>Takes a boolean value. If enabled (the
 109         default), data objects that shall be stored in the journal and
 110         are larger than a certain threshold are compressed before they
 111         are written to the file system.</para></listitem>
 112       </varlistentry>
 113
 114       <varlistentry>
 115         <term><varname>Seal=</varname></term>
 116
 117         <listitem><para>Takes a boolean value. If enabled (the
 118         default), and a sealing key is available (as created by
 119         <citerefentry><refentrytitle>journalctl</refentrytitle><manvolnum>1</manvolnum></citerefentry>'s
 120         <option>--setup-keys</option> command), Forward Secure Sealing
 121         (FSS) for all persistent journal files is enabled. FSS is
 122         based on <ulink
 123         url="https://eprint.iacr.org/2013/397">Seekable Sequential Key
 124         Generators</ulink> by G. A. Marson and B. Poettering
 125         (doi:10.1007/978-3-642-40203-6_7) and may be used to protect
 126         journal files from unnoticed alteration.</para></listitem>
 127       </varlistentry>
 128
 129       <varlistentry>
 130         <term><varname>SplitMode=</varname></term>
 131
 132         <listitem><para>Controls whether to split up journal files per
 133         user. One of <literal>uid</literal>, <literal>login</literal>
 134         and <literal>none</literal>. If <literal>uid</literal>, all
 135         users will get each their own journal files regardless of
 136         whether they possess a login session or not, however system
 137         users will log into the system journal. If
 138         <literal>login</literal>, actually logged-in users will get
 139         each their own journal files, but users without login session
 140         and system users will log into the system journal. If
 141         <literal>none</literal>, journal files are not split up by
 142         user and all messages are instead stored in the single system
 143         journal. Note that splitting up journal files by user is only
 144         available for journals stored persistently. If journals are
 145         stored on volatile storage (see above), only a single journal
 146         file for all user IDs is kept. Defaults to
 147         <literal>uid</literal>.</para></listitem>
 148       </varlistentry>
 149
 150       <varlistentry>
 151         <term><varname>RateLimitInterval=</varname></term>
 152         <term><varname>RateLimitBurst=</varname></term>
 153
 154         <listitem><para>Configures the rate limiting that is applied
 155         to all messages generated on the system. If, in the time
 156         interval defined by <varname>RateLimitInterval=</varname>,
 157         more messages than specified in
 158         <varname>RateLimitBurst=</varname> are logged by a service,
 159         all further messages within the interval are dropped until the
 160         interval is over. A message about the number of dropped
 161         messages is generated. This rate limiting is applied
 162         per-service, so that two services which log do not interfere
 163         with each other's limits. Defaults to 1000 messages in 30s.
 164         The time specification for
 165         <varname>RateLimitInterval=</varname> may be specified in the
 166         following units: <literal>s</literal>, <literal>min</literal>,
 167         <literal>h</literal>, <literal>ms</literal>,
 168         <literal>us</literal>. To turn off any kind of rate limiting,
 169         set either value to 0.</para></listitem>
 170       </varlistentry>
 171
 172       <varlistentry>
 173         <term><varname>SystemMaxUse=</varname></term>
 174         <term><varname>SystemKeepFree=</varname></term>
 175         <term><varname>SystemMaxFileSize=</varname></term>
 176         <term><varname>RuntimeMaxUse=</varname></term>
 177         <term><varname>RuntimeKeepFree=</varname></term>
 178         <term><varname>RuntimeMaxFileSize=</varname></term>
 179
 180         <listitem><para>Enforce size limits on the journal files
 181         stored. The options prefixed with <literal>System</literal>
 182         apply to the journal files when stored on a persistent file
 183         system, more specifically
 184         <filename>/var/log/journal</filename>. The options prefixed
 185         with <literal>Runtime</literal> apply to the journal files
 186         when stored on a volatile in-memory file system, more
 187         specifically <filename>/run/log/journal</filename>. The former
 188         is used only when <filename>/var</filename> is mounted,
 189         writable, and the directory
 190         <filename>/var/log/journal</filename> exists. Otherwise, only
 191         the latter applies. Note that this means that during early
 192         boot and if the administrator disabled persistent logging,
 193         only the latter options apply, while the former apply if
 194         persistent logging is enabled and the system is fully booted
 195         up. <command>journalctl</command> and
 196         <command>systemd-journald</command> ignore all files with
 197         names not ending with <literal>.journal</literal> or
 198         <literal>.journal~</literal>, so only such files, located in
 199         the appropriate directories, are taken into account when
 200         calculating current disk usage.
 201         </para>
 202
 203         <para><varname>SystemMaxUse=</varname> and
 204         <varname>RuntimeMaxUse=</varname> control how much disk space
 205         the journal may use up at maximum.
 206         <varname>SystemKeepFree=</varname> and
 207         <varname>RuntimeKeepFree=</varname> control how much disk
 208         space systemd-journald shall leave free for other uses.
 209         <command>systemd-journald</command> will respect both limits
 210         and use the smaller of the two values.</para>
 211
 212         <para>The first pair defaults to 10% and the second to 15% of
 213         the size of the respective file system. If the file system is
 214         nearly full and either <varname>SystemKeepFree=</varname> or
 215         <varname>RuntimeKeepFree=</varname> is violated when
 216         systemd-journald is started, the value will be raised to
 217         percentage that is actually free. This means that if there was
 218         enough free space before and journal files were created, and
 219         subsequently something else causes the file system to fill up,
 220         journald will stop using more space, but it will not be
 221         removing existing files to go reduce footprint either.</para>
 222
 223         <para><varname>SystemMaxFileSize=</varname>
 224         and
 225         <varname>RuntimeMaxFileSize=</varname>
 226         control how large individual journal
 227         files may grow at maximum. This
 228         influences the granularity in which
 229         disk space is made available through
 230         rotation, i.e. deletion of historic
 231         data. Defaults to one eighth of the
 232         values configured with
 233         <varname>SystemMaxUse=</varname> and
 234         <varname>RuntimeMaxUse=</varname>, so
 235         that usually seven rotated journal
 236         files are kept as history. Specify
 237         values in bytes or use K, M, G, T, P,
 238         E as units for the specified sizes
 239         (equal to 1024, 1024²,... bytes).
 240         Note that size limits are enforced
 241         synchronously when journal files are
 242         extended, and no explicit rotation
 243         step triggered by time is
 244         needed.</para></listitem>
 245       </varlistentry>
 246
 247       <varlistentry>
 248         <term><varname>MaxFileSec=</varname></term>
 249
 250         <listitem><para>The maximum time to store entries in a single
 251         journal file before rotating to the next one. Normally,
 252         time-based rotation should not be required as size-based
 253         rotation with options such as
 254         <varname>SystemMaxFileSize=</varname> should be sufficient to
 255         ensure that journal files do not grow without bounds. However,
 256         to ensure that not too much data is lost at once when old
 257         journal files are deleted, it might make sense to change this
 258         value from the default of one month. Set to 0 to turn off this
 259         feature. This setting takes time values which may be suffixed
 260         with the units <literal>year</literal>,
 261         <literal>month</literal>, <literal>week</literal>,
 262         <literal>day</literal>, <literal>h</literal> or
 263         <literal>m</literal> to override the default time unit of
 264         seconds.</para></listitem>
 265       </varlistentry>
 266
 267       <varlistentry>
 268         <term><varname>MaxRetentionSec=</varname></term>
 269
 270         <listitem><para>The maximum time to store journal entries.
 271         This controls whether journal files containing entries older
 272         then the specified time span are deleted. Normally, time-based
 273         deletion of old journal files should not be required as
 274         size-based deletion with options such as
 275         <varname>SystemMaxUse=</varname> should be sufficient to
 276         ensure that journal files do not grow without bounds. However,
 277         to enforce data retention policies, it might make sense to
 278         change this value from the default of 0 (which turns off this
 279         feature). This setting also takes time values which may be
 280         suffixed with the units <literal>year</literal>,
 281         <literal>month</literal>, <literal>week</literal>,
 282         <literal>day</literal>, <literal>h</literal> or <literal>
 283         m</literal> to override the default time unit of
 284         seconds.</para></listitem>
 285       </varlistentry>
 286
 287
 288       <varlistentry>
 289         <term><varname>SyncIntervalSec=</varname></term>
 290
 291         <listitem><para>The timeout before synchronizing journal files
 292         to disk. After syncing, journal files are placed in the
 293         OFFLINE state. Note that syncing is unconditionally done
 294         immediately after a log message of priority CRIT, ALERT or
 295         EMERG has been logged. This setting hence applies only to
 296         messages of the levels ERR, WARNING, NOTICE, INFO, DEBUG. The
 297         default timeout is 5 minutes. </para></listitem>
 298       </varlistentry>
 299
 300       <varlistentry>
 301         <term><varname>ForwardToSyslog=</varname></term>
 302         <term><varname>ForwardToKMsg=</varname></term>
 303         <term><varname>ForwardToConsole=</varname></term>
 304         <term><varname>ForwardToWall=</varname></term>
 305
 306         <listitem><para>Control whether log messages received by the
 307         journal daemon shall be forwarded to a traditional syslog
 308         daemon, to the kernel log buffer (kmsg), to the system
 309         console, or sent as wall messages to all logged-in users.
 310         These options take boolean arguments. If forwarding to syslog
 311         is enabled but no syslog daemon is running, the respective
 312         option has no effect. By default, only forwarding wall is
 313         enabled. These settings may be overridden at boot time with
 314         the kernel command line options
 315         <literal>systemd.journald.forward_to_syslog=</literal>,
 316         <literal>systemd.journald.forward_to_kmsg=</literal>,
 317         <literal>systemd.journald.forward_to_console=</literal> and
 318         <literal>systemd.journald.forward_to_wall=</literal>. When
 319         forwarding to the console, the TTY to log to can be changed
 320         with <varname>TTYPath=</varname>, described
 321         below.</para></listitem>
 322       </varlistentry>
 323
 324       <varlistentry>
 325         <term><varname>MaxLevelStore=</varname></term>
 326         <term><varname>MaxLevelSyslog=</varname></term>
 327         <term><varname>MaxLevelKMsg=</varname></term>
 328         <term><varname>MaxLevelConsole=</varname></term>
 329         <term><varname>MaxLevelWall=</varname></term>
 330
 331         <listitem><para>Controls the maximum log level of messages
 332         that are stored on disk, forwarded to syslog, kmsg, the
 333         console or wall (if that is enabled, see above). As argument,
 334         takes one of
 335         <literal>emerg</literal>,
 336         <literal>alert</literal>,
 337         <literal>crit</literal>,
 338         <literal>err</literal>,
 339         <literal>warning</literal>,
 340         <literal>notice</literal>,
 341         <literal>info</literal>,
 342         <literal>debug</literal>,
 343         or integer values in the range of 0..7 (corresponding to the
 344         same levels). Messages equal or below the log level specified
 345         are stored/forwarded, messages above are dropped. Defaults to
 346         <literal>debug</literal> for <varname>MaxLevelStore=</varname>
 347         and <varname>MaxLevelSyslog=</varname>, to ensure that the all
 348         messages are written to disk and forwarded to syslog. Defaults
 349         to
 350         <literal>notice</literal> for <varname>MaxLevelKMsg=</varname>,
 351         <literal>info</literal> for <varname>MaxLevelConsole=</varname>,
 352         and <literal>emerg</literal> for
 353         <varname>MaxLevelWall=</varname>.</para></listitem>
 354       </varlistentry>
 355
 356       <varlistentry>
 357         <term><varname>TTYPath=</varname></term>
 358
 359         <listitem><para>Change the console TTY to use if
 360         <varname>ForwardToConsole=yes</varname> is used. Defaults to
 361         <filename>/dev/console</filename>.</para></listitem>
 362       </varlistentry>
 363
 364     </variablelist>
 365
 366   </refsect1>
 367
 368   <refsect1>
 369       <title>See Also</title>
 370       <para>
 371         <citerefentry><refentrytitle>systemd</refentrytitle><manvolnum>1</manvolnum></citerefentry>,
 372         <citerefentry><refentrytitle>systemd-journald.service</refentrytitle><manvolnum>8</manvolnum></citerefentry>,
 373         <citerefentry><refentrytitle>journalctl</refentrytitle><manvolnum>1</manvolnum></citerefentry>,
 374         <citerefentry><refentrytitle>systemd.journal-fields</refentrytitle><manvolnum>7</manvolnum></citerefentry>,
 375         <citerefentry><refentrytitle>systemd-system.conf</refentrytitle><manvolnum>5</manvolnum></citerefentry>
 376       </para>
 377   </refsect1>
 378
 379 </refentry>