Red Hat System Administration I

From workstation, open an SSH session to servera as student.

[student@workstation ~]$ ssh student@servera
...output omitted...
[student@servera ~]$ 

As the superuser, confirm that the /var/log/journal directory does not exist. Use the ls command to list the /var/log/journal directory contents. Use sudo to elevate the student user privileges. Use student as the password if asked.

[student@servera ~]$ sudo ls /var/log/journal
[sudo] password for student: student
ls: cannot access '/var/log/journal': No such file or directory

As the /var/log/journal directory does not exist, the systemd-journald service is not preserving its log data.

Configure the systemd-journald service on servera to preserve journals across a reboot.

1. Uncomment the Storage=auto line in the /etc/systemd/journald.conf file and set Storage to persistent. You may use the sudo vim /etc/systemd/journald.conf command to edit the configuration file. Type / Storage=auto from vim command mode to search for the Storage=auto line.

   ...output omitted...
   [Journal]
   Storage=persistent
   ...output omitted...

2. Use the systemctl command to restart the systemd-journald service to bring the configuration changes into effect.

   [student@servera ~]$ sudo systemctl restart systemd-journald.service

Confirm that the systemd-journald service on servera preserves its journals such that the journals persist across reboots.

1. Use the systemctl reboot command to restart servera.

   [student@servera ~]$ sudo systemctl reboot
   Connection to servera closed by remote host.
   Connection to servera closed.
   [student@workstation ~]$ 

   Notice that the SSH connection was terminated as soon as you restarted the servera system.

2. Open an SSH session to servera again.

   [student@workstation ~]$ ssh student@servera
   ...output omitted...
   [student@servera ~]$ 

3. Use the ls command to confirm that the /var/log/journal directory exists. The /var/log/journal directory contains a subdirectory with a long hexadecimal name. The journal files are found in that directory. The subdirectory name on your system will be different.

   [student@servera ~]$ sudo ls /var/log/journal
   [sudo] password for student: student
   73ab164e278e48be9bf80e80714a8cd5
   [student@servera ~]$ sudo ls \
   /var/log/journal/73ab164e278e48be9bf80e80714a8cd5
   system.journal  user-1000.journal

4. Log out of servera.

   [student@servera ~]$ exit
   logout
   Connection to servera closed.