← Back to Linux Roadmaps

Press enter or space to select a node. You can then use the arrow keys to move the node around. Press delete to remove it and escape to cancel.

Press enter or space to select an edge. You can then press delete to remove it or escape to cancel.

Topic 108 · Essential System Services

108.2 System logging

Step 1 of 11 · weight 4

From event to record

A log is a record of an event that you can read later. An application may write its own file. Central logging chooses the destination in one place.

Four steps: produce, route, store, inspect
After a record is produced, the service sends it to a file, a terminal, or a remote server
A missing file does not mean the install is broken. The journal can be the only store

Commands

systemctl status rsyslogIs rsyslog running; the main process is rsyslogd
systemctl status systemd-journaldIs journald running

Exam note

Weight 4. The tools are rsyslog, logrotate, journald, and journalctl. journald is not the new name of rsyslog.