Skip to main content

Journald

Journald Collector​

To collect log entries from the journald service, you can use the journald collector.

Parameters​

In addition to the shared collector properties, the journald collector accepts the following parameters to filter journal records:

system (Optional)​

Show messages from system services and the kernel. Default to false

dmesg (Optional)​

Include messages from the kernel ring buffer. Default to false

units (Optional)​

A list of systemd units to include messages from. If empty, messages from all units will be included.

since (Optional)​

Specify a starting point for the journal entries. This can be a timestamp or a relative time (for example, "1 day ago" for the previous day).

until (Optional)​

Specify an endpoint for the journal entries. This can be a timestamp or a relative time.

output (Optional)​

Specify the format for the collected logs. Default is "short".

lines (Optional)​

Limit the number of lines to fetch from the journal. If set to 0, all lines will be fetched. Default is 0.

reverse (Optional)​

Show the newest entries first. Default to false.

utc (Optional)​

Show timestamps in UTC. Default to false.

timeout (Optional)​

Specify a timeout for collecting the logs. Default to "30s".

Example Collector Definition​

apiVersion: troubleshoot.sh/v1beta2
kind: SupportBundle
metadata:
  name: logs
spec:
  hostCollectors:
    - journald:
        collectorName: "k0s"
        system: false
        dmesg: false
        units:
          - k0scontroller
          - containerd
        since: "1 day ago"
        output: "json"
        lines: 1000
        reverse: true
        utc: true
        timeout: "30s"

Included Resources​

The results of the journald collector are stored in the host-collectors/journald directory of the bundle. Two files per collector execution will be stored in this directory.

  • [collector-name].txt - output of the logs from journalctl
  • [collector-name]-info.json - the command that was executed, its exit code and any output read from stderr. See the example below:
{
  "command": "/usr/bin/journalctl -u k0scontroller -n 100 --reverse --utc --no-pager",
  "exitCode": "0",
  "error": "",
  "outputDir": "",
  "input": "",
  "env": null
}