ComViewing and Managing Log Files Flashcards
Log file Categories
System
Service
Event
Application
A logging system which stores logs in a binary format that can be viewed by using the journalctl utility
systemd journal
A utility that can be installed and is usually installed by default in order to manage log files.
logrotate
The main system log for debian based hosts and stores all global system activity and startup messages
/var/log/syslog
Options controlled by /etc/syslog.config or /etc/rsyslog.conf in newer versions
The main system log on rhel based hosts. Stores all global system acitivity and startup messages
/var/log/messages
Option for journalctl that views messages for a particular systemdunit
-u unit
Follows journalctl for latest messages
-f
jumps to the end of the journal
-e
adds explanaion texts from the message catalog
-xs
hows entries from a specified data
-s -u since until
Setings for the systemd journal can be updated by modifying /etc/systemd/journald.conf