{"id":11029,"date":"2016-06-15T13:44:01","date_gmt":"2016-06-15T16:44:01","guid":{"rendered":"https:\/\/cleuber.com.br\/?p=11029"},"modified":"2016-06-17T14:20:44","modified_gmt":"2016-06-17T17:20:44","slug":"como-analisar-os-logs-usando-o-journalctl","status":"publish","type":"post","link":"https:\/\/cleuber.com.br\/index.php\/2016\/06\/15\/como-analisar-os-logs-usando-o-journalctl","title":{"rendered":"Como Analisar os Logs Usando o Journalctl"},"content":{"rendered":"<p class=\"maintitle\"><a href=\"https:\/\/i0.wp.com\/cleuber.com.br\/wp-content\/uploads\/2016\/06\/Data-search-600x450.jpg?ssl=1\"><img data-recalc-dims=\"1\" decoding=\"async\" loading=\"lazy\" class=\"wp-image-11052 alignleft\" src=\"https:\/\/i0.wp.com\/cleuber.com.br\/wp-content\/uploads\/2016\/06\/Data-search-600x450.jpg?resize=275%2C206&#038;ssl=1\" alt=\"Data-search-600x450\" width=\"275\" height=\"206\" srcset=\"https:\/\/i0.wp.com\/cleuber.com.br\/wp-content\/uploads\/2016\/06\/Data-search-600x450.jpg?resize=600%2C450&amp;ssl=1 600w, https:\/\/i0.wp.com\/cleuber.com.br\/wp-content\/uploads\/2016\/06\/Data-search-600x450.jpg?resize=300%2C225&amp;ssl=1 300w\" sizes=\"auto, (max-width: 275px) 100vw, 275px\" \/><\/a>Todo administrador tem como rotina checar os servi\u00e7os de um servidor atr\u00e1s de problemas e ent\u00e3o realizar medidas para corrigir os problemas.<\/p>\n<p class=\"maintitle\">Algumas distribui\u00e7\u00f5es Linux usam o Rsyslog como sistema de log, e outras o Journalctl. As que usam o Systemd ao inv\u00e9s do init ou outro similar, trazem o utilit\u00e1rio\u00a0Journalctl. E existe uma mudan\u00e7a ocorrendo que tem tornado o Systemd padr\u00e3o para a maioria das distribui\u00e7\u00f5es e por isso trar\u00e1 o Journalctl junto.<\/p>\n<p class=\"maintitle\">Em tr\u00eas\u00a0outros artigo recentes, eu mostro porque isso acontece e qual a vantagem de se usar o systemd e o journalctl.<\/p>\n<ul>\n<li><span style=\"text-decoration: underline;\"><span style=\"color: #3366ff;\"><a style=\"color: #3366ff; text-decoration: underline;\" href=\"https:\/\/cleuber.com.br\/index.php\/2016\/06\/15\/init-vs-systemd\" target=\"_blank\">Init-vs-Systemd<\/a><\/span><\/span><\/li>\n<li><span style=\"text-decoration: underline;\"><span style=\"color: #3366ff;\"><a style=\"color: #3366ff; text-decoration: underline;\" href=\"https:\/\/cleuber.com.br\/index.php\/2016\/06\/15\/como-analisar-os-logs-usando-o-journalctl\" target=\"_blank\">Porque-o-journalctl-e-bacana-e-porque-o-rsyslog-vai-sobreviver-por-mais-uma-decada<\/a><\/span><\/span><\/li>\n<li><a href=\"https:\/\/cleuber.com.br\/index.php\/2016\/06\/15\/como-analisar-os-logs-usando-o-journalctl\" target=\"_blank\"><span style=\"text-decoration: underline; color: #3366ff;\">Como-analisar-os-logs-usando-o-journalctl<\/span><\/a><\/li>\n<\/ul>\n<p id=\"topper\" class=\"maintitle\"><span class=\"notranslate\">Bom, ent\u00e3o sabemos que o\u00a0Journalctl\u00a0\u00e9 um utilit\u00e1rio do systemd.<\/span>\u00a0E ele \u00e9<span class=\"notranslate\">\u00a0usado para consultar e exibir mensagens do journal.<\/span> <span class=\"notranslate\">Uma vez que o journal \u00e9 composto por um ou mais arquivos bin\u00e1rios, journalctl \u00e9 a maneira padr\u00e3o para ler mensagens a partir dele.<\/span><\/p>\n<p class=\"maintitle\"><span class=\"notranslate\">Nos par\u00e1grafos seguintes, vamos ver como journalctl pode ser usado com alguns dos seus par\u00e2metros.<\/span> <span class=\"notranslate\">Cada par\u00e2metro pode ser usado sozinho ou combinado com outros par\u00e2metros para estreitar ainda mais o \u00e2mbito da pesquisa.<\/span><\/p>\n<p><span class=\"notranslate\">Quando executado sem par\u00e2metros, o comando a seguir ir\u00e1 mostrar todas as entradas do journal, que pode ser bastante longa:<\/span><\/p>\n<pre>journalctl<\/pre>\n<p>As entradas come\u00e7ar\u00e3o com uma\u00a0flag\u00a0semelhante a esta que mostra o per\u00edodo de tempo abrangido pelo log:<\/p>\n<pre><span class=\"crayon-o\">--<\/span> <span class=\"crayon-e\">Logs <\/span><span class=\"crayon-e\">begin <\/span><span class=\"crayon-e\">at <\/span><span class=\"crayon-i\">Thu<\/span> <span class=\"crayon-cn\">2015<\/span><span class=\"crayon-o\">-<\/span><span class=\"crayon-cn\">06<\/span><span class=\"crayon-o\">-<\/span><span class=\"crayon-cn\">25<\/span> <span class=\"crayon-cn\">00<\/span><span class=\"crayon-o\">:<\/span><span class=\"crayon-cn\">34<\/span><span class=\"crayon-o\">:<\/span><span class=\"crayon-cn\">38<\/span> <span class=\"crayon-v\">EDT<\/span><span class=\"crayon-sy\">,<\/span> <span class=\"crayon-st\">end<\/span> <span class=\"crayon-e\">at <\/span><span class=\"crayon-i\">Sun<\/span> <span class=\"crayon-cn\">2015<\/span><span class=\"crayon-o\">-<\/span><span class=\"crayon-cn\">06<\/span><span class=\"crayon-o\">-<\/span><span class=\"crayon-cn\">28<\/span> <span class=\"crayon-cn\">20<\/span><span class=\"crayon-o\">:<\/span><span class=\"crayon-cn\">30<\/span><span class=\"crayon-o\">:<\/span><span class=\"crayon-cn\">55<\/span> <span class=\"crayon-v\">EDT<\/span><span class=\"crayon-sy\">.<\/span> <span class=\"crayon-o\">--<\/span><\/pre>\n<p>O journalctl vai parar depois de exibir cada tela de mensagens, e voc\u00ea pode pressionar <strong>PgDn<\/strong> ou barra de espa\u00e7o para ver a pr\u00f3xima tela cheia. Para parar a qualquer momento, pressione <strong>q<\/strong>. Isso funciona como o comando <strong>less<\/strong> padr\u00e3o em Linux. Entradas longas s\u00e3o mostradas conforme\u00a0\u00e0 largura da tela e truncado com off no final, se eles n\u00e3o se encaixam. A por\u00e7\u00e3o de corte pode ser vista usando as <strong>teclas de seta esquerda e direita<\/strong>.<\/p>\n<p>Para obter uma lista completa de op\u00e7\u00f5es de journalctl, voc\u00ea pode visitar a <a href=\"http:\/\/www.freedesktop.org\/software\/systemd\/man\/journalctl.html\">p\u00e1gina de manual do\u00a0journalctl<\/a>.<\/p>\n<h2>Mensagens de inicializa\u00e7\u00e3o<\/h2>\n<p>Para ver mensagens relacionadas com o arranque da boot\u00a0atual, use a op\u00e7\u00e3o <strong>-b<\/strong>:<\/p>\n<pre><span class=\"crayon-v\">journalctl<\/span> <span class=\"crayon-o\">-<\/span><span class=\"crayon-v\">b<\/span><\/pre>\n<p>Para ver mensagens da \u00faltima inicializa\u00e7\u00e3o, use o modificador <strong>-1<\/strong>; para ver as mensagens de inicializa\u00e7\u00e3o a partir de duas botas atr\u00e1s, usar <strong>-2<\/strong>; e assim por diante. No exemplo abaixo, vamos\u00a0ver mensagens do \u00faltimo boot e n\u00e3o do atual:<\/p>\n<pre><span class=\"crayon-v\">journalctl<\/span> <span class=\"crayon-o\">-<\/span><span class=\"crayon-v\">b -1<\/span><\/pre>\n<p>Para listar os boots do sistema, use o seguinte comando:<\/p>\n<pre><span class=\"crayon-v\">journalctl<\/span> <span class=\"crayon-o\">--<\/span><span class=\"crayon-v\">list<\/span><span class=\"crayon-o\">-<\/span><span class=\"crayon-v\">boots<\/span><\/pre>\n<p>Ele ir\u00e1 mostrar um resultado tabulado como este:<\/p>\n<pre><span class=\"crayon-o\">-<\/span><span class=\"crayon-cn\">1<\/span> <span class=\"crayon-e\">ad5756178e5040d093cd74162d38000f <\/span><span class=\"crayon-i\">Thu<\/span> <span class=\"crayon-cn\">2015<\/span><span class=\"crayon-o\">-<\/span><span class=\"crayon-cn\">06<\/span><span class=\"crayon-o\">-<\/span><span class=\"crayon-cn\">25<\/span> <span class=\"crayon-cn\">00<\/span><span class=\"crayon-o\">:<\/span><span class=\"crayon-cn\">34<\/span><span class=\"crayon-o\">:<\/span><span class=\"crayon-cn\">38<\/span> <span class=\"crayon-v\">EDT<\/span><span class=\"crayon-o\">-<\/span><span class=\"crayon-i\">Sat<\/span> <span class=\"crayon-cn\">2015<\/span><span class=\"crayon-o\">-<\/span><span class=\"crayon-cn\">06<\/span><span class=\"crayon-o\">-<\/span><span class=\"crayon-cn\">27<\/span> <span class=\"crayon-cn\">21<\/span><span class=\"crayon-o\">:<\/span><span class=\"crayon-cn\">41<\/span><span class=\"crayon-o\">:<\/span><span class=\"crayon-cn\">27<\/span> <span class=\"crayon-i\">EDT\r\n<\/span> <span class=\"crayon-cn\">0<\/span> <span class=\"crayon-cn\">7fd49ca34fcf44c59806b2b6f240ae16<\/span> <span class=\"crayon-i\">Sat<\/span> <span class=\"crayon-cn\">2015<\/span><span class=\"crayon-o\">-<\/span><span class=\"crayon-cn\">06<\/span><span class=\"crayon-o\">-<\/span><span class=\"crayon-cn\">27<\/span> <span class=\"crayon-cn\">21<\/span><span class=\"crayon-o\">:<\/span><span class=\"crayon-cn\">41<\/span><span class=\"crayon-o\">:<\/span><span class=\"crayon-cn\">30<\/span> <span class=\"crayon-v\">EDT<\/span><span class=\"crayon-o\">-<\/span><span class=\"crayon-i\">Sun<\/span> <span class=\"crayon-cn\">2015<\/span><span class=\"crayon-o\">-<\/span><span class=\"crayon-cn\">06<\/span><span class=\"crayon-o\">-<\/span><span class=\"crayon-cn\">28<\/span> <span class=\"crayon-cn\">21<\/span><span class=\"crayon-o\">:<\/span><span class=\"crayon-cn\">10<\/span><span class=\"crayon-o\">:<\/span><span class=\"crayon-cn\">00<\/span> <span class=\"crayon-v\">EDT<\/span><\/pre>\n<p>O primeiro campo \u00e9 o n\u00famero de inicializa\u00e7\u00e3o (0 sendo o mais recente de inicializa\u00e7\u00e3o, sendo o boot -1 antes dessa, e assim por diante), seguido por um ID de inicializa\u00e7\u00e3o (um n\u00famero hexadecimal longo), seguido pelos &#8220;timestamp&#8221; (registro da data e hora), da primeira e da \u00faltima mensagem relacionadas a esse boot.<\/p>\n<h2>Intervalos de Tempo<\/h2>\n<p>Para ver mensagens registradas dentro de uma janela de tempo espec\u00edfico, podemos usar o <strong>&#8211;since<\/strong> e o\u00a0<strong>&#8211;until<\/strong>. O comando a seguir mostra mensagens do journal registrados na \u00faltima hora:<\/p>\n<pre id=\"crayon-576143c9a25fc782795768-1\" class=\"crayon-line\"><span class=\"crayon-v\">journalctl<\/span> <span class=\"crayon-o\">--<\/span><span class=\"crayon-i\">since<\/span> <span class=\"crayon-s\">\"1 hour ago\"<\/span><\/pre>\n<p class=\"crayon-line\">Para ver mensagens registradas nos \u00faltimos dois dias, o seguinte comando pode ser usado:<\/p>\n<pre class=\"crayon-line\"><span class=\"crayon-v\">journalctl<\/span> <span class=\"crayon-o\">--<\/span><span class=\"crayon-i\">since<\/span> <span class=\"crayon-s\">\"2 days ago\"<\/span><\/pre>\n<p class=\"crayon-line\">O comando a seguir mostrar\u00e1 mensagens entre duas datas e hor\u00e1rios. Todas as mensagens registradas <strong>desde<\/strong>\u00a0(since) a data e hora definida e <strong>at\u00e9<\/strong>\u00a0(until) a data e hora definida:<\/p>\n<pre class=\"crayon-line\"><span class=\"crayon-v\">journalctl<\/span> <span class=\"crayon-o\">--<\/span><span class=\"crayon-i\">since<\/span> <span class=\"crayon-s\">\"2015-06-26 23:15:00\"<\/span> <span class=\"crayon-o\">--<\/span><span class=\"crayon-i\">until<\/span> <span class=\"crayon-s\">\"2015-06-26 23:20:00\"<\/span><\/pre>\n<p class=\"crayon-line\">Note que a data e hora precisa ser especificada no formato: &#8220;AAAA-MM-DD HH: MM: SS&#8221; (Ano, m\u00eas, dia, hora, minuto, e segundo).<\/p>\n<h2>Por\u00a0Unidade<\/h2>\n<p>Para ver mensagens registradas por qualquer unidade systemd, use a op\u00e7\u00e3o <strong>-u<\/strong>. No exemplo abaixo, o comando ir\u00e1 mostrar todas as mensagens registradas pelo servidor web usando o programa nginx. Voc\u00ea pode usar o &#8220;since&#8221; e &#8220;until&#8221; e at\u00e9 interruptores aqui para identificar erros no servidor web que ocorreram dentro de uma janela de tempo:<\/p>\n<pre><span class=\"crayon-v\">journalctl<\/span> <span class=\"crayon-o\">-<\/span><span class=\"crayon-i\">u<\/span> <span class=\"crayon-v\">nginx<\/span><span class=\"crayon-sy\">.<\/span><span class=\"crayon-v\">service<\/span><\/pre>\n<p>A op\u00e7\u00e3o <strong>-u<\/strong> pode ser usado v\u00e1rias vezes para especificar mais de uma fonte de unidade. Por exemplo, se voc\u00ea quiser ver entradas para o nginx e mysql, o seguinte comando pode ser usado:<\/p>\n<pre><span class=\"crayon-v\">journalctl<\/span> <span class=\"crayon-o\">-<\/span><span class=\"crayon-i\">u<\/span> <span class=\"crayon-v\">nginx<\/span><span class=\"crayon-sy\">.<\/span><span class=\"crayon-v\">service<\/span> <span class=\"crayon-o\">-<\/span><span class=\"crayon-i\">u<\/span> <span class=\"crayon-v\">mysql<\/span><span class=\"crayon-sy\">.<\/span><span class=\"crayon-v\">service<\/span><\/pre>\n<h2 id=\"crayon-576143c9a2608967993992\" class=\"crayon-syntax crayon-theme-classic crayon-font-courier-new crayon-os-pc print-yes notranslate\" data-settings=\" minimize scroll-mouseover\">Follow\u00a0ou\u00a0Tail<\/h2>\n<p>Para executar journalctl como o comando <strong>tail<\/strong> Linux para que ele mostre\u00a0continuamente mensagens de log, use a op\u00e7\u00e3o <strong>-f<\/strong>:<\/p>\n<pre>journalctl -f<\/pre>\n<p id=\"crayon-576143c9a260b399795334\" class=\"crayon-syntax crayon-theme-classic crayon-font-courier-new crayon-os-pc print-yes notranslate\" data-settings=\" minimize scroll-mouseover\">O pr\u00f3ximo comando &#8220;seguir\u00e1&#8221;\u00a0o daemon do\u00a0mysql:<\/p>\n<pre class=\"crayon-syntax crayon-theme-classic crayon-font-courier-new crayon-os-pc print-yes notranslate\" data-settings=\" minimize scroll-mouseover\"><span class=\"crayon-v\">journalctl<\/span> <span class=\"crayon-o\">-<\/span><span class=\"crayon-i\">u<\/span> <span class=\"crayon-v\">mysql<\/span><span class=\"crayon-sy\">.<\/span><span class=\"crayon-v\">service<\/span> <span class=\"crayon-o\">-<\/span><span class=\"crayon-v\">f<\/span><\/pre>\n<p class=\"crayon-syntax crayon-theme-classic crayon-font-courier-new crayon-os-pc print-yes notranslate\" data-settings=\" minimize scroll-mouseover\">Para parar de &#8220;seguir&#8221; e retornar ao prompt, pressione <strong>Ctrl+C<\/strong>.<\/p>\n<p>Usando a\u00a0op\u00e7\u00e3o <strong>-n<\/strong> ir\u00e1 mostrar\u00a0o n\u00famero especificado dos lan\u00e7amentos recentes. No comando a seguir, estamos exibindo\u00a0as \u00faltimas 50 mensagens registradas na \u00faltima hora:<\/p>\n<pre id=\"crayon-576143c9a2611032127827-1\" class=\"crayon-line\"><span class=\"crayon-v\">journalctl<\/span> <span class=\"crayon-o\">-<\/span><span class=\"crayon-i\">n<\/span> <span class=\"crayon-cn\">50<\/span> <span class=\"crayon-o\">--<\/span><span class=\"crayon-i\">since<\/span> <span class=\"crayon-s\">\"1 hour ago\"<\/span><\/pre>\n<p class=\"crayon-line\">O par\u00e2metro <strong>-r<\/strong> mostra entradas de di\u00e1rio em ordem cronol\u00f3gica inversa para que as mensagens mais recentes sejam exibidas. O comando abaixo mostra as \u00faltimas 10 mensagens do daemon sshd, listadas em ordem inversa:<\/p>\n<pre class=\"crayon-line\"><span class=\"crayon-v\">journalctl<\/span> <span class=\"crayon-o\">-<\/span><span class=\"crayon-i\">u<\/span> <span class=\"crayon-v\">sshd<\/span><span class=\"crayon-sy\">.<\/span><span class=\"crayon-v\">service<\/span> <span class=\"crayon-o\">-<\/span><span class=\"crayon-v\">r<\/span> <span class=\"crayon-o\">-<\/span><span class=\"crayon-i\">n<\/span> <span class=\"crayon-cn\">1<\/span><\/pre>\n<h2 class=\"crayon-line\">Formatos de Sa\u00edda<\/h2>\n<p>O par\u00e2metro <strong>-o<\/strong> nos permite formatar a sa\u00edda de consulta journalctl. O <strong>-o<\/strong> (ou -output se estamos usando o nome longo) pode nos trazer\u00a0alguns valores:<\/p>\n<p><b>json<\/b> ir\u00e1 mostrar cada entrada de di\u00e1rio no formato JSON em uma linha longa.<\/p>\n<p><b>json-pretty<\/b> ir\u00e1 mostrar cada entrada de log no formato JSON f\u00e1cil de ler.<\/p>\n<p><b>verbose<\/b>\u00a0mostrar\u00e1 informa\u00e7\u00e3o muito detalhada para cada registro do journal\u00a0com todos os campos listados.<\/p>\n<p><b>cat<\/b>\u00a0mostra as mensagens em forma muito curta, sem quaisquer nomes de servidor data\/hora ou de origem.<\/p>\n<p><b>short<\/b>\u00a0\u00e9 o formato de sa\u00edda padr\u00e3o: Mostra mensagens no estilo syslog.<\/p>\n<p><b>short-monotonic<\/b>\u00a0\u00e9 semelhante ao short, mas o segundo valor cont\u00e9m o timestamp que \u00e9 mostrado com precis\u00e3o. Isso pode ser \u00fatil quando voc\u00ea est\u00e1 olhando para mensagens de erro gerados a partir de mais de uma fonte que, aparentemente, est\u00e1 jogando mensagens de erro, ao mesmo tempo e voc\u00ea quer ir para o level. O comando de filtragem seguinte mostra \u00faltima sa\u00edda em formato <strong>JSON-pretty:<\/strong><\/p>\n<pre>journalctl -u sshd.service -r -n 10 -o json-pretty.<\/pre>\n<p>A sa\u00edda pode se parecer como isso:<\/p>\n<div id=\"crayon-576143c9a2617572461666\" class=\"crayon-syntax crayon-theme-classic crayon-font-courier-new crayon-os-pc print-yes notranslate\" data-settings=\" minimize scroll-mouseover\">\n<div class=\"crayon-main\">\n<table class=\"crayon-table\">\n<tbody>\n<tr class=\"crayon-row\">\n<td class=\"crayon-nums \" data-settings=\"show\">\n<div class=\"crayon-num\" data-line=\"crayon-576143c9a2617572461666-1\">1<\/div>\n<div class=\"crayon-num crayon-striped-num\" data-line=\"crayon-576143c9a2617572461666-2\">2<\/div>\n<div class=\"crayon-num\" data-line=\"crayon-576143c9a2617572461666-3\">3<\/div>\n<div class=\"crayon-num crayon-striped-num\" data-line=\"crayon-576143c9a2617572461666-4\">4<\/div>\n<div class=\"crayon-num\" data-line=\"crayon-576143c9a2617572461666-5\">5<\/div>\n<div class=\"crayon-num crayon-striped-num\" data-line=\"crayon-576143c9a2617572461666-6\">6<\/div>\n<div class=\"crayon-num\" data-line=\"crayon-576143c9a2617572461666-7\">7<\/div>\n<div class=\"crayon-num crayon-striped-num\" data-line=\"crayon-576143c9a2617572461666-8\">8<\/div>\n<div class=\"crayon-num\" data-line=\"crayon-576143c9a2617572461666-9\">9<\/div>\n<div class=\"crayon-num crayon-striped-num\" data-line=\"crayon-576143c9a2617572461666-10\">10<\/div>\n<div class=\"crayon-num\" data-line=\"crayon-576143c9a2617572461666-11\">11<\/div>\n<div class=\"crayon-num crayon-striped-num\" data-line=\"crayon-576143c9a2617572461666-12\">12<\/div>\n<div class=\"crayon-num\" data-line=\"crayon-576143c9a2617572461666-13\">13<\/div>\n<div class=\"crayon-num crayon-striped-num\" data-line=\"crayon-576143c9a2617572461666-14\">14<\/div>\n<div class=\"crayon-num\" data-line=\"crayon-576143c9a2617572461666-15\">15<\/div>\n<div class=\"crayon-num crayon-striped-num\" data-line=\"crayon-576143c9a2617572461666-16\">16<\/div>\n<div class=\"crayon-num\" data-line=\"crayon-576143c9a2617572461666-17\">17<\/div>\n<div class=\"crayon-num crayon-striped-num\" data-line=\"crayon-576143c9a2617572461666-18\">18<\/div>\n<div class=\"crayon-num\" data-line=\"crayon-576143c9a2617572461666-19\">19<\/div>\n<div class=\"crayon-num crayon-striped-num\" data-line=\"crayon-576143c9a2617572461666-20\">20<\/div>\n<div class=\"crayon-num\" data-line=\"crayon-576143c9a2617572461666-21\">21<\/div>\n<div class=\"crayon-num crayon-striped-num\" data-line=\"crayon-576143c9a2617572461666-22\">22<\/div>\n<div class=\"crayon-num\" data-line=\"crayon-576143c9a2617572461666-23\">23<\/div>\n<\/td>\n<td class=\"crayon-code\">\n<div id=\"crayon-576143c9a2617572461666-1\" class=\"crayon-line\"><span class=\"crayon-sy\">{<\/span><\/div>\n<div id=\"crayon-576143c9a2617572461666-2\" class=\"crayon-line crayon-striped-line\"><span class=\"crayon-s\">&#8220;__CURSOR&#8221;<\/span> <span class=\"crayon-o\">:<\/span> <span class=\"crayon-s\">&#8220;s=bf93c444c3a2499095953159a3cba8c2;i=40c14;b=fbde6d3112084cd097c250aee3bab030;m=4f30cd3897;t=5199f269b9024;x=a424fc0dd9da81c4&#8221;<\/span><span class=\"crayon-sy\">,<\/span><\/div>\n<div id=\"crayon-576143c9a2617572461666-3\" class=\"crayon-line\"><span class=\"crayon-s\">&#8220;__REALTIME_TIMESTAMP&#8221;<\/span> <span class=\"crayon-o\">:<\/span> <span class=\"crayon-s\">&#8220;1435546221776932&#8221;<\/span><span class=\"crayon-sy\">,<\/span><\/div>\n<div id=\"crayon-576143c9a2617572461666-4\" class=\"crayon-line crayon-striped-line\"><span class=\"crayon-s\">&#8220;__MONOTONIC_TIMESTAMP&#8221;<\/span> <span class=\"crayon-o\">:<\/span> <span class=\"crayon-s\">&#8220;340121172119&#8221;<\/span><span class=\"crayon-sy\">,<\/span><\/div>\n<div id=\"crayon-576143c9a2617572461666-5\" class=\"crayon-line\"><span class=\"crayon-s\">&#8220;_BOOT_ID&#8221;<\/span> <span class=\"crayon-o\">:<\/span> <span class=\"crayon-s\">&#8220;fbde6d3112084cd097c250aee3bab030&#8221;<\/span><span class=\"crayon-sy\">,<\/span><\/div>\n<div id=\"crayon-576143c9a2617572461666-6\" class=\"crayon-line crayon-striped-line\"><span class=\"crayon-s\">&#8220;_TRANSPORT&#8221;<\/span> <span class=\"crayon-o\">:<\/span> <span class=\"crayon-s\">&#8220;syslog&#8221;<\/span><span class=\"crayon-sy\">,<\/span><\/div>\n<div id=\"crayon-576143c9a2617572461666-7\" class=\"crayon-line\"><span class=\"crayon-s\">&#8220;PRIORITY&#8221;<\/span> <span class=\"crayon-o\">:<\/span> <span class=\"crayon-s\">&#8220;6&#8221;<\/span><span class=\"crayon-sy\">,<\/span><\/div>\n<div id=\"crayon-576143c9a2617572461666-8\" class=\"crayon-line crayon-striped-line\"><span class=\"crayon-s\">&#8220;SYSLOG_FACILITY&#8221;<\/span> <span class=\"crayon-o\">:<\/span> <span class=\"crayon-s\">&#8220;10&#8221;<\/span><span class=\"crayon-sy\">,<\/span> <span class=\"crayon-s\">&#8220;SYSLOG_IDENTIFIER&#8221;<\/span> <span class=\"crayon-o\">:<\/span> <span class=\"crayon-s\">&#8220;sshd&#8221;<\/span><span class=\"crayon-sy\">,<\/span><\/div>\n<div id=\"crayon-576143c9a2617572461666-9\" class=\"crayon-line\"><span class=\"crayon-s\">&#8220;MESSAGE&#8221;<\/span> <span class=\"crayon-o\">:<\/span> <span class=\"crayon-s\">&#8220;pam_succeed_if(sshd:auth): requirement &#8220;<\/span><span class=\"crayon-v\">uid<\/span> <span class=\"crayon-o\">&amp;<\/span><span class=\"crayon-v\">gt<\/span><span class=\"crayon-sy\">;<\/span><span class=\"crayon-o\">=<\/span> <span class=\"crayon-cn\">1000<\/span><span class=\"crayon-s\">&#8221; not met by user &#8220;<\/span><span class=\"crayon-i\">root<\/span><span class=\"crayon-s\">&#8220;&#8221;<\/span><span class=\"crayon-sy\">,<\/span><\/div>\n<div id=\"crayon-576143c9a2617572461666-10\" class=\"crayon-line crayon-striped-line\"><span class=\"crayon-s\">&#8220;_UID&#8221;<\/span> <span class=\"crayon-o\">:<\/span> <span class=\"crayon-s\">&#8220;0&#8221;<\/span><span class=\"crayon-sy\">,<\/span><\/div>\n<div id=\"crayon-576143c9a2617572461666-11\" class=\"crayon-line\"><span class=\"crayon-s\">&#8220;_GID&#8221;<\/span> <span class=\"crayon-o\">:<\/span> <span class=\"crayon-s\">&#8220;0&#8221;<\/span><span class=\"crayon-sy\">,<\/span><\/div>\n<div id=\"crayon-576143c9a2617572461666-12\" class=\"crayon-line crayon-striped-line\"><span class=\"crayon-s\">&#8220;_COMM&#8221;<\/span> <span class=\"crayon-o\">:<\/span> <span class=\"crayon-s\">&#8220;sshd&#8221;<\/span><span class=\"crayon-sy\">,<\/span><\/div>\n<div id=\"crayon-576143c9a2617572461666-13\" class=\"crayon-line\"><span class=\"crayon-s\">&#8220;_EXE&#8221;<\/span> <span class=\"crayon-o\">:<\/span> <span class=\"crayon-s\">&#8220;\/usr\/sbin\/sshd&#8221;<\/span><span class=\"crayon-sy\">,<\/span><\/div>\n<div id=\"crayon-576143c9a2617572461666-14\" class=\"crayon-line crayon-striped-line\"><span class=\"crayon-s\">&#8220;_CMDLINE&#8221;<\/span> <span class=\"crayon-o\">:<\/span> <span class=\"crayon-s\">&#8220;sshd: root [priv] \u00a0\u00a0&#8220;<\/span><span class=\"crayon-sy\">,<\/span><\/div>\n<div id=\"crayon-576143c9a2617572461666-15\" class=\"crayon-line\"><span class=\"crayon-s\">&#8220;_CAP_EFFECTIVE&#8221;<\/span> <span class=\"crayon-o\">:<\/span> <span class=\"crayon-s\">&#8220;1fffffffff&#8221;<\/span><span class=\"crayon-sy\">,<\/span> <span class=\"crayon-s\">&#8220;_SYSTEMD_CGROUP&#8221;<\/span> <span class=\"crayon-o\">:<\/span> <span class=\"crayon-s\">&#8220;\/system.slice\/sshd.service&#8221;<\/span><span class=\"crayon-sy\">,<\/span><\/div>\n<div id=\"crayon-576143c9a2617572461666-16\" class=\"crayon-line crayon-striped-line\"><span class=\"crayon-s\">&#8220;_SYSTEMD_UNIT&#8221;<\/span> <span class=\"crayon-o\">:<\/span> <span class=\"crayon-s\">&#8220;sshd.service&#8221;<\/span><span class=\"crayon-sy\">,<\/span><\/div>\n<div id=\"crayon-576143c9a2617572461666-17\" class=\"crayon-line\"><span class=\"crayon-s\">&#8220;_SYSTEMD_SLICE&#8221;<\/span> <span class=\"crayon-o\">:<\/span> <span class=\"crayon-s\">&#8220;system.slice&#8221;<\/span><span class=\"crayon-sy\">,<\/span><\/div>\n<div id=\"crayon-576143c9a2617572461666-18\" class=\"crayon-line crayon-striped-line\"><span class=\"crayon-s\">&#8220;_MACHINE_ID&#8221;<\/span> <span class=\"crayon-o\">:<\/span> <span class=\"crayon-s\">&#8220;fd8cf26e06e411e4a9d004010897bd01&#8221;<\/span><span class=\"crayon-sy\">,<\/span><\/div>\n<div id=\"crayon-576143c9a2617572461666-19\" class=\"crayon-line\"><span class=\"crayon-s\">&#8220;_HOSTNAME&#8221;<\/span> <span class=\"crayon-o\">:<\/span> <span class=\"crayon-s\">&#8220;test-centos7&#8221;<\/span><span class=\"crayon-sy\">,<\/span><\/div>\n<div id=\"crayon-576143c9a2617572461666-20\" class=\"crayon-line crayon-striped-line\"><span class=\"crayon-s\">&#8220;SYSLOG_PID&#8221;<\/span> <span class=\"crayon-o\">:<\/span> <span class=\"crayon-s\">&#8220;32724&#8221;<\/span><span class=\"crayon-sy\">,<\/span><\/div>\n<div id=\"crayon-576143c9a2617572461666-21\" class=\"crayon-line\"><span class=\"crayon-s\">&#8220;_PID&#8221;<\/span> <span class=\"crayon-o\">:<\/span> <span class=\"crayon-s\">&#8220;32724&#8221;<\/span><span class=\"crayon-sy\">,<\/span><\/div>\n<div id=\"crayon-576143c9a2617572461666-22\" class=\"crayon-line crayon-striped-line\"><span class=\"crayon-s\">&#8220;_SOURCE_REALTIME_TIMESTAMP&#8221;<\/span> <span class=\"crayon-o\">:<\/span> <span class=\"crayon-s\">&#8220;1435546221776510&#8221;<\/span><\/div>\n<div id=\"crayon-576143c9a2617572461666-23\" class=\"crayon-line\"><span class=\"crayon-sy\">}<\/span><\/div>\n<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<\/div>\n<\/div>\n<h2>Por Prioridade<\/h2>\n<p>Use a op\u00e7\u00e3o <strong>-p<\/strong> para filtrar mensagens com base em um n\u00edvel de prioridade. Para ver quais n\u00edveis de prioridade est\u00e3o dispon\u00edveis, consulte a se\u00e7\u00e3o sobre par\u00e2metros de configura\u00e7\u00e3o <strong>Systemd-journald<\/strong> e os poss\u00edveis valores de par\u00e2metros <strong>MaxLevelStore<\/strong>. Se um \u00fanico n\u00edvel de prioridade for especificado, todas as mensagens com esse n\u00edvel de prioridade e abaixo dela ser\u00e3o exibidos. Para usar uma gama de n\u00edveis de prioridade, use o &#8220;FROM&#8230;TO&#8221;. Como um exemplo, o comando abaixo mostrar\u00e1 todas as mensagens com prioridade entre <strong>emerg\u00eancia e cr\u00edtico<\/strong> do \u00faltimo boot:<\/p>\n<pre><span class=\"crayon-v\">journalctl<\/span> <span class=\"crayon-o\">-<\/span><span class=\"crayon-v\">b<\/span> <span class=\"crayon-o\">-<\/span><span class=\"crayon-cn\">1<\/span> \u00a0<span class=\"crayon-o\">-<\/span><span class=\"crayon-i\">p<\/span> <span class=\"crayon-s\">\"crit\"<\/span><\/pre>\n<h2 id=\"crayon-576143c9a261b368715486\" class=\"crayon-syntax crayon-theme-classic crayon-font-courier-new crayon-os-pc print-yes notranslate\" data-settings=\" minimize scroll-mouseover\">Por Usu\u00e1rio<\/h2>\n<p>Para localizar todas as mensagens relacionadas a um usu\u00e1rio espec\u00edfico, use o UID do usu\u00e1rio. No exemplo a seguir, n\u00f3s estamos encontrando o UID do usu\u00e1rio mysql:<\/p>\n<pre>id mysql<\/pre>\n<p>Isso retorna uma linha como esta:<\/p>\n<pre><span class=\"crayon-v\">uid<\/span><span class=\"crayon-o\">=<\/span><span class=\"crayon-cn\">108<\/span><span class=\"crayon-sy\">(<\/span><span class=\"crayon-v\">mysql<\/span><span class=\"crayon-sy\">)<\/span> <span class=\"crayon-v\">gid<\/span><span class=\"crayon-o\">=<\/span><span class=\"crayon-cn\">116<\/span><span class=\"crayon-sy\">(<\/span><span class=\"crayon-v\">mysql<\/span><span class=\"crayon-sy\">)<\/span> <span class=\"crayon-v\">groups<\/span><span class=\"crayon-o\">=<\/span><span class=\"crayon-cn\">116<\/span><span class=\"crayon-sy\">(<\/span><span class=\"crayon-v\">mysql<\/span><span class=\"crayon-sy\">)<\/span><\/pre>\n<p id=\"crayon-576143c9a2621637291899\" class=\"crayon-syntax crayon-theme-classic crayon-font-courier-new crayon-os-pc print-yes notranslate\" data-settings=\" minimize scroll-mouseover\">E ent\u00e3o n\u00f3s iremos consultar no journal\u00a0todas as mensagens registradas por esse usu\u00e1rio:<\/p>\n<pre class=\"crayon-syntax crayon-theme-classic crayon-font-courier-new crayon-os-pc print-yes notranslate\" data-settings=\" minimize scroll-mouseover\"><span class=\"crayon-e\">journalctl <\/span><span class=\"crayon-v\">_UID<\/span><span class=\"crayon-o\">=<\/span><span class=\"crayon-cn\">108<\/span><\/pre>\n<p class=\"crayon-syntax crayon-theme-classic crayon-font-courier-new crayon-os-pc print-yes notranslate\" data-settings=\" minimize scroll-mouseover\">A sa\u00edda seria assim:<\/p>\n<div id=\"crayon-576143c9a2627269742848\" class=\"crayon-syntax crayon-theme-classic crayon-font-courier-new crayon-os-pc print-yes notranslate\" data-settings=\" minimize scroll-mouseover\">\n<div class=\"crayon-main\"><\/div>\n<div class=\"crayon-main\"><\/div>\n<div class=\"crayon-main\">\n<table class=\"crayon-table\">\n<tbody>\n<tr class=\"crayon-row\">\n<td class=\"crayon-nums \" data-settings=\"show\">\n<div class=\"crayon-num\" data-line=\"crayon-576143c9a2627269742848-1\">1<\/div>\n<div class=\"crayon-num crayon-striped-num\" data-line=\"crayon-576143c9a2627269742848-2\">2<\/div>\n<div class=\"crayon-num\" data-line=\"crayon-576143c9a2627269742848-3\">3<\/div>\n<div class=\"crayon-num crayon-striped-num\" data-line=\"crayon-576143c9a2627269742848-4\">4<\/div>\n<div class=\"crayon-num\" data-line=\"crayon-576143c9a2627269742848-5\">5<\/div>\n<div class=\"crayon-num crayon-striped-num\" data-line=\"crayon-576143c9a2627269742848-6\">6<\/div>\n<div class=\"crayon-num\" data-line=\"crayon-576143c9a2627269742848-7\">7<\/div>\n<div class=\"crayon-num crayon-striped-num\" data-line=\"crayon-576143c9a2627269742848-8\">8<\/div>\n<div class=\"crayon-num\" data-line=\"crayon-576143c9a2627269742848-9\">9<\/div>\n<div class=\"crayon-num crayon-striped-num\" data-line=\"crayon-576143c9a2627269742848-10\">10<\/div>\n<div class=\"crayon-num\" data-line=\"crayon-576143c9a2627269742848-11\">11<\/div>\n<div class=\"crayon-num crayon-striped-num\" data-line=\"crayon-576143c9a2627269742848-12\">12<\/div>\n<\/td>\n<td class=\"crayon-code\">\n<div id=\"crayon-576143c9a2627269742848-1\" class=\"crayon-line\"><span class=\"crayon-o\">&#8212;<\/span> <span class=\"crayon-e\">Logs <\/span><span class=\"crayon-e\">begin <\/span><span class=\"crayon-e\">at <\/span><span class=\"crayon-i\">Thu<\/span> <span class=\"crayon-cn\">2015<\/span><span class=\"crayon-o\">&#8211;<\/span><span class=\"crayon-cn\">06<\/span><span class=\"crayon-o\">&#8211;<\/span><span class=\"crayon-cn\">25<\/span> <span class=\"crayon-cn\">00<\/span><span class=\"crayon-o\">:<\/span><span class=\"crayon-cn\">34<\/span><span class=\"crayon-o\">:<\/span><span class=\"crayon-cn\">38<\/span> <span class=\"crayon-v\">EDT<\/span><span class=\"crayon-sy\">,<\/span> <span class=\"crayon-st\">end<\/span> <span class=\"crayon-e\">at <\/span><span class=\"crayon-i\">Sun<\/span> <span class=\"crayon-cn\">2015<\/span><span class=\"crayon-o\">&#8211;<\/span><span class=\"crayon-cn\">06<\/span><span class=\"crayon-o\">&#8211;<\/span><span class=\"crayon-cn\">28<\/span> <span class=\"crayon-cn\">23<\/span><span class=\"crayon-o\">:<\/span><span class=\"crayon-cn\">16<\/span><span class=\"crayon-o\">:<\/span><span class=\"crayon-cn\">08<\/span> <span class=\"crayon-v\">EDT<\/span><span class=\"crayon-sy\">.<\/span> <span class=\"crayon-o\">&#8212;<\/span><\/div>\n<div id=\"crayon-576143c9a2627269742848-2\" class=\"crayon-line crayon-striped-line\"><span class=\"crayon-i\">Jun<\/span> <span class=\"crayon-cn\">25<\/span> <span class=\"crayon-cn\">00<\/span><span class=\"crayon-o\">:<\/span><span class=\"crayon-cn\">53<\/span><span class=\"crayon-o\">:<\/span><span class=\"crayon-cn\">21<\/span> <span class=\"crayon-v\">test<\/span><span class=\"crayon-o\">&#8211;<\/span><span class=\"crayon-e\">ubuntu15 <\/span><span class=\"crayon-v\">mysqld_safe<\/span><span class=\"crayon-sy\">[<\/span><span class=\"crayon-cn\">11177<\/span><span class=\"crayon-sy\">]<\/span><span class=\"crayon-o\">:<\/span> <span class=\"crayon-cn\">150625<\/span> <span class=\"crayon-cn\">00<\/span><span class=\"crayon-o\">:<\/span><span class=\"crayon-cn\">53<\/span><span class=\"crayon-o\">:<\/span><span class=\"crayon-cn\">21<\/span> <span class=\"crayon-e\">mysqld_safe <\/span><span class=\"crayon-i\">Can<\/span><span class=\"crayon-s\">&#8216;t log to error log and syslog at the same time. \u00a0Remove all &#8211;log-error configuration options for &#8211;syslog to take effect.<\/span><\/div>\n<div id=\"crayon-576143c9a2627269742848-3\" class=\"crayon-line\"><span class=\"crayon-s\">Jun 25 00:53:21 test-ubuntu15 mysqld_safe[11177]: 150625 00:53:21 mysqld_safe Logging to &#8216;<\/span><span class=\"crayon-o\">\/<\/span><span class=\"crayon-t\">var<\/span><span class=\"crayon-o\">\/<\/span><span class=\"crayon-v\">log<\/span><span class=\"crayon-o\">\/<\/span><span class=\"crayon-v\">mysql<\/span><span class=\"crayon-o\">\/<\/span><span class=\"crayon-v\">error<\/span><span class=\"crayon-sy\">.<\/span><span class=\"crayon-i\">log<\/span><span class=\"crayon-s\">&#8216;.<\/span><\/div>\n<div id=\"crayon-576143c9a2627269742848-4\" class=\"crayon-line crayon-striped-line\"><span class=\"crayon-s\">Jun 25 00:53:21 test-ubuntu15 mysqld_safe[11177]: 150625 00:53:21 mysqld_safe Starting mysqld daemon with databases from \/var\/lib\/mysql<\/span><\/div>\n<div id=\"crayon-576143c9a2627269742848-5\" class=\"crayon-line\"><span class=\"crayon-s\">Jun 27 21:41:26 test-ubuntu15 mysqld_safe[11177]: Could not open required defaults file: \/etc\/mysql\/debian.cnf<\/span><\/div>\n<div id=\"crayon-576143c9a2627269742848-6\" class=\"crayon-line crayon-striped-line\"><span class=\"crayon-s\">Jun 27 21:41:26 test-ubuntu15 mysqld_safe[11177]: Fatal error in defaults handling. Program aborted<\/span><\/div>\n<div id=\"crayon-576143c9a2627269742848-7\" class=\"crayon-line\"><span class=\"crayon-s\">Jun 27 21:41:26 test-ubuntu15 mysqld_safe[11177]: 150627 21:41:26 mysqld_safe mysqld from pid file \/var\/run\/mysqld\/mysqld.pid ended<\/span><\/div>\n<div id=\"crayon-576143c9a2627269742848-8\" class=\"crayon-line crayon-striped-line\"><\/div>\n<div id=\"crayon-576143c9a2627269742848-9\" class=\"crayon-line\"><span class=\"crayon-s\">&lt;b&gt;&#8211; Reboot &#8211;&lt;\/b&gt;<\/span><\/div>\n<div id=\"crayon-576143c9a2627269742848-10\" class=\"crayon-line crayon-striped-line\"><span class=\"crayon-s\">Jun 27 21:41:33 test-ubuntu15 mysqld_safe[561]: 150627 21:41:33 mysqld_safe Can&#8217;<\/span><span class=\"crayon-i\">t<\/span> <span class=\"crayon-e\">log <\/span><span class=\"crayon-st\">to<\/span> <span class=\"crayon-e\">error <\/span><span class=\"crayon-e\">log <\/span><span class=\"crayon-st\">and<\/span> <span class=\"crayon-e\">syslog <\/span><span class=\"crayon-e\">at <\/span><span class=\"crayon-e\">the <\/span><span class=\"crayon-e\">same <\/span><span class=\"crayon-v\">time<\/span><span class=\"crayon-sy\">.<\/span> \u00a0<span class=\"crayon-e\">Remove <\/span><span class=\"crayon-v\">all<\/span> <span class=\"crayon-o\">&#8212;<\/span><span class=\"crayon-v\">log<\/span><span class=\"crayon-o\">&#8211;<\/span><span class=\"crayon-e\">error <\/span><span class=\"crayon-e\">configuration <\/span><span class=\"crayon-e\">options <\/span><span class=\"crayon-st\">for<\/span> <span class=\"crayon-o\">&#8212;<\/span><span class=\"crayon-e\">syslog <\/span><span class=\"crayon-st\">to<\/span> <span class=\"crayon-e\">take <\/span><span class=\"crayon-v\">effect<\/span><span class=\"crayon-sy\">.<\/span><\/div>\n<div id=\"crayon-576143c9a2627269742848-11\" class=\"crayon-line\"><span class=\"crayon-i\">Jun<\/span> <span class=\"crayon-cn\">27<\/span> <span class=\"crayon-cn\">21<\/span><span class=\"crayon-o\">:<\/span><span class=\"crayon-cn\">41<\/span><span class=\"crayon-o\">:<\/span><span class=\"crayon-cn\">33<\/span> <span class=\"crayon-v\">test<\/span><span class=\"crayon-o\">&#8211;<\/span><span class=\"crayon-e\">ubuntu15 <\/span><span class=\"crayon-v\">mysqld_safe<\/span><span class=\"crayon-sy\">[<\/span><span class=\"crayon-cn\">561<\/span><span class=\"crayon-sy\">]<\/span><span class=\"crayon-o\">:<\/span> <span class=\"crayon-cn\">150627<\/span> <span class=\"crayon-cn\">21<\/span><span class=\"crayon-o\">:<\/span><span class=\"crayon-cn\">41<\/span><span class=\"crayon-o\">:<\/span><span class=\"crayon-cn\">33<\/span> <span class=\"crayon-e\">mysqld_safe <\/span><span class=\"crayon-e\">Logging <\/span><span class=\"crayon-st\">to<\/span> <span class=\"crayon-s\">&#8216;\/var\/log\/mysql\/error.log&#8217;<\/span><span class=\"crayon-sy\">.<\/span><\/div>\n<div id=\"crayon-576143c9a2627269742848-12\" class=\"crayon-line crayon-striped-line\"><span class=\"crayon-i\">Jun<\/span> <span class=\"crayon-cn\">27<\/span> <span class=\"crayon-cn\">21<\/span><span class=\"crayon-o\">:<\/span><span class=\"crayon-cn\">41<\/span><span class=\"crayon-o\">:<\/span><span class=\"crayon-cn\">33<\/span> <span class=\"crayon-v\">test<\/span><span class=\"crayon-o\">&#8211;<\/span><span class=\"crayon-e\">ubuntu15 <\/span><span class=\"crayon-v\">mysqld_safe<\/span><span class=\"crayon-sy\">[<\/span><span class=\"crayon-cn\">561<\/span><span class=\"crayon-sy\">]<\/span><span class=\"crayon-o\">:<\/span> <span class=\"crayon-cn\">150627<\/span> <span class=\"crayon-cn\">21<\/span><span class=\"crayon-o\">:<\/span><span class=\"crayon-cn\">41<\/span><span class=\"crayon-o\">:<\/span><span class=\"crayon-cn\">33<\/span> <span class=\"crayon-e\">mysqld_safe <\/span><span class=\"crayon-e\">Starting <\/span><span class=\"crayon-e\">mysqld <\/span><span class=\"crayon-e\">daemon <\/span><span class=\"crayon-e\">with <\/span><span class=\"crayon-e\">databases <\/span><span class=\"crayon-v\">from<\/span> <span class=\"crayon-o\">\/<\/span><span class=\"crayon-t\">var<\/span><span class=\"crayon-o\">\/<\/span><span class=\"crayon-v\">lib<\/span><span class=\"crayon-o\">\/<\/span><span class=\"crayon-v\">mysql<\/span><\/div>\n<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<p>Bom pessoal, como falei no come\u00e7o do artigo, para maiores informa\u00e7\u00f5es consulte a <span style=\"text-decoration: underline; color: #3366ff;\"><a style=\"color: #3366ff; text-decoration: underline;\" href=\"https:\/\/www.freedesktop.org\/software\/systemd\/man\/journalctl.html\" target=\"_blank\">p\u00e1gina de manual do jounalctl<\/a><\/span>.<\/p>\n<h2>Ferramentas Visuais<\/h2>\n<\/div>\n<\/div>\n<p>Se voc\u00ea estiver usando distros como o <span style=\"text-decoration: underline; color: #3366ff;\"><a style=\"color: #3366ff; text-decoration: underline;\" href=\"https:\/\/cleuber.com.br\/index.php\/2016\/06\/06\/sobre-suse-enterprise-linux-opensuse-tumbleweed-e-o-opensuse-leap\" target=\"_blank\">SUSE Enterprise ou o openSUSE<\/a><\/span> por exemplo, poder\u00e1 tamb\u00e9m checar os registros do journal usando o m\u00f3dulo do <strong>Yast<\/strong> chamado journal-systemd, ou &#8220;Entradas do Di\u00e1rio&#8221;, conforme imagem abaixo.<\/p>\n<p><strong>Obs.<\/strong> O painel de controle Yast tamb\u00e9m funciona em modo texto no terminal. Ent\u00e3o poderia ser usado mesmo se voc\u00ea n\u00e3o possuir ambiente desktop instalado no SUSE\/openSUSE.<\/p>\n<p><a href=\"https:\/\/i0.wp.com\/cleuber.com.br\/wp-content\/uploads\/2016\/06\/journal4.png?ssl=1\"><img data-recalc-dims=\"1\" decoding=\"async\" loading=\"lazy\" class=\"alignnone size-large wp-image-11033\" src=\"https:\/\/i0.wp.com\/cleuber.com.br\/wp-content\/uploads\/2016\/06\/journal4.png?resize=620%2C417&#038;ssl=1\" alt=\"journal4\" width=\"620\" height=\"417\" srcset=\"https:\/\/i0.wp.com\/cleuber.com.br\/wp-content\/uploads\/2016\/06\/journal4.png?w=1024&amp;ssl=1 1024w, https:\/\/i0.wp.com\/cleuber.com.br\/wp-content\/uploads\/2016\/06\/journal4.png?resize=300%2C202&amp;ssl=1 300w, https:\/\/i0.wp.com\/cleuber.com.br\/wp-content\/uploads\/2016\/06\/journal4.png?resize=768%2C517&amp;ssl=1 768w\" sizes=\"auto, (max-width: 620px) 100vw, 620px\" \/><\/a> \u00a0\u00a0<a href=\"https:\/\/i0.wp.com\/cleuber.com.br\/wp-content\/uploads\/2016\/06\/journal1.png?ssl=1\"><img data-recalc-dims=\"1\" decoding=\"async\" loading=\"lazy\" class=\"alignnone size-large wp-image-11036\" src=\"https:\/\/i0.wp.com\/cleuber.com.br\/wp-content\/uploads\/2016\/06\/journal1.png?resize=620%2C494&#038;ssl=1\" alt=\"journal1\" width=\"620\" height=\"494\" srcset=\"https:\/\/i0.wp.com\/cleuber.com.br\/wp-content\/uploads\/2016\/06\/journal1.png?w=800&amp;ssl=1 800w, https:\/\/i0.wp.com\/cleuber.com.br\/wp-content\/uploads\/2016\/06\/journal1.png?resize=300%2C239&amp;ssl=1 300w, https:\/\/i0.wp.com\/cleuber.com.br\/wp-content\/uploads\/2016\/06\/journal1.png?resize=768%2C612&amp;ssl=1 768w\" sizes=\"auto, (max-width: 620px) 100vw, 620px\" \/><\/a><\/p>\n<p>Voc\u00ea poder\u00e1 alterar o filtro que desejar usando o bot\u00e3o &#8220;<strong>Mudar Filtro&#8230;&#8221;<\/strong>\u00a0no canto inferior esquerdo, e repare que <strong>quase todas<\/strong> as op\u00e7\u00f5es que citamos neste artigo, ou seja, o desde e at\u00e9 (since e until), desde o \u00faltimo boot, ou boot anterior, por unidade, por comando ou execut\u00e1veis, e por prioridade (com uma combo-box para voc\u00ea definir a prioridade), s\u00e3o exibidas na ferramenta.<\/p>\n<p><img data-recalc-dims=\"1\" decoding=\"async\" loading=\"lazy\" class=\"alignnone size-large wp-image-11034\" src=\"https:\/\/i0.wp.com\/cleuber.com.br\/wp-content\/uploads\/2016\/06\/journal3.png?resize=620%2C494&#038;ssl=1\" alt=\"journal3\" width=\"620\" height=\"494\" srcset=\"https:\/\/i0.wp.com\/cleuber.com.br\/wp-content\/uploads\/2016\/06\/journal3.png?w=801&amp;ssl=1 801w, https:\/\/i0.wp.com\/cleuber.com.br\/wp-content\/uploads\/2016\/06\/journal3.png?resize=300%2C239&amp;ssl=1 300w, https:\/\/i0.wp.com\/cleuber.com.br\/wp-content\/uploads\/2016\/06\/journal3.png?resize=768%2C612&amp;ssl=1 768w\" sizes=\"auto, (max-width: 620px) 100vw, 620px\" \/><\/p>\n<h4>Gnome-logs<\/h4>\n<p>Existe tamb\u00e9m uma ferramenta do Gnome, (que n\u00e3o vem instalada por padr\u00e3o, mas voc\u00ea poder\u00e1 instal\u00e1-la usando o seu gerenciador de pacotes), chamada gnome-logs que mostra para voc\u00ea mensagens do seu journal e lhe permite pesquisar por elas. Mas esta n\u00e3o \u00e9 t\u00e3o completa, pois n\u00e3o lhe permite realizar filtragens, apenas possui algumas categorias. Com certeza o m\u00f3dulo do Yast \u00e9 bem mais completo que esta, mas talvez possa ser \u00fatil para voc\u00ea.<\/p>\n<p><a href=\"https:\/\/i0.wp.com\/cleuber.com.br\/wp-content\/uploads\/2016\/06\/gnome-logs.png?ssl=1\"><img data-recalc-dims=\"1\" decoding=\"async\" loading=\"lazy\" class=\"alignnone wp-image-11037\" src=\"https:\/\/i0.wp.com\/cleuber.com.br\/wp-content\/uploads\/2016\/06\/gnome-logs.png?resize=610%2C448&#038;ssl=1\" alt=\"gnome-logs\" width=\"610\" height=\"448\" srcset=\"https:\/\/i0.wp.com\/cleuber.com.br\/wp-content\/uploads\/2016\/06\/gnome-logs.png?w=747&amp;ssl=1 747w, https:\/\/i0.wp.com\/cleuber.com.br\/wp-content\/uploads\/2016\/06\/gnome-logs.png?resize=300%2C220&amp;ssl=1 300w\" sizes=\"auto, (max-width: 610px) 100vw, 610px\" \/><\/a><\/p>\n<h3>Conclus\u00e3o<\/h3>\n<p>Bom, realmente o journalctl \u00e9 bem legal com seus diversos filtros e a possibilidade de podermos combin\u00e1-los. Usando-o\u00a0no terminal existem muito mais op\u00e7\u00f5es\u00a0de filtros que podemos combinar.<br \/>\nA maioria das Distribui\u00e7\u00f5es Linux est\u00e3o usando ou migrando para o systemd, e por isso o journalctl, ent\u00e3o creio que \u00e9 uma boa ideia nos acostumarmos a analisarmos os logs nesta ferramenta.<\/p>\n<p>Outro artigo que pode ajudar a entender como gerenciar servi\u00e7os do Systemd \u00e9 esse abaixo:<\/p>\n<p><a href=\"https:\/\/cleuber.com.br\/index.php\/2016\/06\/17\/como-usar-o-systemctl-para-gerenciar-servicos-do-systemd\" target=\"_blank\"><img data-recalc-dims=\"1\" decoding=\"async\" loading=\"lazy\" class=\"alignnone wp-image-11104 size-full\" src=\"https:\/\/i0.wp.com\/cleuber.com.br\/wp-content\/uploads\/2016\/06\/systemctl.png?resize=567%2C519&#038;ssl=1\" alt=\"systemctl\" width=\"567\" height=\"519\" srcset=\"https:\/\/i0.wp.com\/cleuber.com.br\/wp-content\/uploads\/2016\/06\/systemctl.png?w=567&amp;ssl=1 567w, https:\/\/i0.wp.com\/cleuber.com.br\/wp-content\/uploads\/2016\/06\/systemctl.png?resize=300%2C275&amp;ssl=1 300w\" sizes=\"auto, (max-width: 567px) 100vw, 567px\" \/><\/a><\/p>\n<p>Aquele abra\u00e7o!<\/p>\n<p>Cleuber<\/p>\n<p>fonte: (eu mesmo rs)<br \/>\ne\u00a0<a href=\"https:\/\/www.loggly.com\/ultimate-guide\/using-journalctl\/\">loggly.com<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Todo administrador tem como rotina checar os servi\u00e7os de um servidor atr\u00e1s de problemas e ent\u00e3o realizar medidas para corrigir os problemas. Algumas distribui\u00e7\u00f5es Linux usam o Rsyslog como sistema de log, e outras o Journalctl. As que usam o Systemd ao inv\u00e9s do init ou outro similar, trazem o utilit\u00e1rio\u00a0Journalctl. E existe uma mudan\u00e7a &hellip;<\/p>\n","protected":false},"author":1,"featured_media":11027,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"nf_dc_page":"","_monsterinsights_skip_tracking":false,"footnotes":""},"categories":[51,488,348],"tags":[601,522,602],"class_list":["post-11029","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-dicas-e-tutoriais","category-seguranca","category-servidores-linux","tag-journalctl","tag-logs","tag-systemd"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.4 - aioseo.com -->\n\t<meta name=\"description\" content=\"Todo administrador tem como rotina checar os servi\u00e7os de um servidor atr\u00e1s de problemas e ent\u00e3o realizar medidas para corrigir os problemas. Algumas distribui\u00e7\u00f5es Linux usam o Rsyslog como sistema de log, e outras o Journalctl. As que usam o Systemd ao inv\u00e9s do init ou outro similar, trazem o utilit\u00e1rio Journalctl. E existe uma mudan\u00e7a\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Cleuber Silva Hashimoto\"\/>\n\t<meta name=\"google-site-verification\" content=\"Npc_aRi1FHMW9AED2_44vmYJxqmmv3OsGYEUfARLcIY\" \/>\n\t<link rel=\"canonical\" href=\"https:\/\/cleuber.com.br\/index.php\/2016\/06\/15\/como-analisar-os-logs-usando-o-journalctl\" \/>\n\t\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.4\" \/>\n\t\t<meta property=\"og:locale\" content=\"pt_BR\" \/>\n\t\t<meta property=\"og:site_name\" content=\"Cleuber.com.br - Linux e muito mais\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"Como Analisar os Logs Usando o Journalctl - Cleuber.com.br\" \/>\n\t\t<meta property=\"og:description\" content=\"Todo administrador tem como rotina checar os servi\u00e7os de um servidor atr\u00e1s de problemas e ent\u00e3o realizar medidas para corrigir os problemas. Algumas distribui\u00e7\u00f5es Linux usam o Rsyslog como sistema de log, e outras o Journalctl. As que usam o Systemd ao inv\u00e9s do init ou outro similar, trazem o utilit\u00e1rio Journalctl. E existe uma mudan\u00e7a\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/cleuber.com.br\/index.php\/2016\/06\/15\/como-analisar-os-logs-usando-o-journalctl\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2016-06-15T16:44:01+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2016-06-17T17:20:44+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/Cleubberstone\" \/>\n\t\t<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n\t\t<meta name=\"twitter:title\" content=\"Como Analisar os Logs Usando o Journalctl - Cleuber.com.br\" \/>\n\t\t<meta name=\"twitter:description\" content=\"Todo administrador tem como rotina checar os servi\u00e7os de um servidor atr\u00e1s de problemas e ent\u00e3o realizar medidas para corrigir os problemas. Algumas distribui\u00e7\u00f5es Linux usam o Rsyslog como sistema de log, e outras o Journalctl. As que usam o Systemd ao inv\u00e9s do init ou outro similar, trazem o utilit\u00e1rio Journalctl. E existe uma mudan\u00e7a\" \/>\n\t\t<script type=\"application\/ld+json\" class=\"aioseo-schema\">\n\t\t\t{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"BlogPosting\",\"@id\":\"https:\\\/\\\/cleuber.com.br\\\/index.php\\\/2016\\\/06\\\/15\\\/como-analisar-os-logs-usando-o-journalctl#blogposting\",\"name\":\"Como Analisar os Logs Usando o Journalctl - Cleuber.com.br\",\"headline\":\"Como Analisar os Logs Usando o Journalctl\",\"author\":{\"@id\":\"https:\\\/\\\/cleuber.com.br\\\/index.php\\\/author\\\/cleuberadmin#author\"},\"publisher\":{\"@id\":\"https:\\\/\\\/cleuber.com.br\\\/#person\"},\"image\":{\"@type\":\"ImageObject\",\"url\":\"https:\\\/\\\/i0.wp.com\\\/cleuber.com.br\\\/wp-content\\\/uploads\\\/2016\\\/06\\\/journalctl.png?fit=1600%2C900&ssl=1\",\"width\":1600,\"height\":900},\"datePublished\":\"2016-06-15T13:44:01-03:00\",\"dateModified\":\"2016-06-17T14:20:44-03:00\",\"inLanguage\":\"pt-BR\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/cleuber.com.br\\\/index.php\\\/2016\\\/06\\\/15\\\/como-analisar-os-logs-usando-o-journalctl#webpage\"},\"isPartOf\":{\"@id\":\"https:\\\/\\\/cleuber.com.br\\\/index.php\\\/2016\\\/06\\\/15\\\/como-analisar-os-logs-usando-o-journalctl#webpage\"},\"articleSection\":\"Dicas e Tutoriais, Seguran\\u00e7a, Servidores Linux, journalctl, logs, systemd\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/cleuber.com.br\\\/index.php\\\/2016\\\/06\\\/15\\\/como-analisar-os-logs-usando-o-journalctl#breadcrumblist\",\"itemListElement\":[{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/cleuber.com.br\\\/#listItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/cleuber.com.br\\\/\",\"nextItem\":{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/cleuber.com.br\\\/index.php\\\/category\\\/dicas-e-tutoriais#listItem\",\"name\":\"Dicas e Tutoriais\"}},{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/cleuber.com.br\\\/index.php\\\/category\\\/dicas-e-tutoriais#listItem\",\"position\":2,\"name\":\"Dicas e Tutoriais\",\"item\":\"https:\\\/\\\/cleuber.com.br\\\/index.php\\\/category\\\/dicas-e-tutoriais\",\"nextItem\":{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/cleuber.com.br\\\/index.php\\\/category\\\/dicas-e-tutoriais\\\/tutoriais-linux#listItem\",\"name\":\"Linux\"},\"previousItem\":{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/cleuber.com.br\\\/#listItem\",\"name\":\"Home\"}},{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/cleuber.com.br\\\/index.php\\\/category\\\/dicas-e-tutoriais\\\/tutoriais-linux#listItem\",\"position\":3,\"name\":\"Linux\",\"item\":\"https:\\\/\\\/cleuber.com.br\\\/index.php\\\/category\\\/dicas-e-tutoriais\\\/tutoriais-linux\",\"nextItem\":{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/cleuber.com.br\\\/index.php\\\/category\\\/dicas-e-tutoriais\\\/tutoriais-linux\\\/servidores-linux#listItem\",\"name\":\"Servidores Linux\"},\"previousItem\":{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/cleuber.com.br\\\/index.php\\\/category\\\/dicas-e-tutoriais#listItem\",\"name\":\"Dicas e Tutoriais\"}},{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/cleuber.com.br\\\/index.php\\\/category\\\/dicas-e-tutoriais\\\/tutoriais-linux\\\/servidores-linux#listItem\",\"position\":4,\"name\":\"Servidores Linux\",\"item\":\"https:\\\/\\\/cleuber.com.br\\\/index.php\\\/category\\\/dicas-e-tutoriais\\\/tutoriais-linux\\\/servidores-linux\",\"nextItem\":{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/cleuber.com.br\\\/index.php\\\/2016\\\/06\\\/15\\\/como-analisar-os-logs-usando-o-journalctl#listItem\",\"name\":\"Como Analisar os Logs Usando o Journalctl\"},\"previousItem\":{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/cleuber.com.br\\\/index.php\\\/category\\\/dicas-e-tutoriais\\\/tutoriais-linux#listItem\",\"name\":\"Linux\"}},{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/cleuber.com.br\\\/index.php\\\/2016\\\/06\\\/15\\\/como-analisar-os-logs-usando-o-journalctl#listItem\",\"position\":5,\"name\":\"Como Analisar os Logs Usando o Journalctl\",\"previousItem\":{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/cleuber.com.br\\\/index.php\\\/category\\\/dicas-e-tutoriais\\\/tutoriais-linux\\\/servidores-linux#listItem\",\"name\":\"Servidores Linux\"}}]},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/cleuber.com.br\\\/#person\",\"name\":\"Cleuber Silva Hashimoto\",\"image\":{\"@type\":\"ImageObject\",\"@id\":\"https:\\\/\\\/cleuber.com.br\\\/index.php\\\/2016\\\/06\\\/15\\\/como-analisar-os-logs-usando-o-journalctl#personImage\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/382cc2afc0e4994bd5ac25a6ca83ac6d76411a7b4d65e33bfdab32c831931eb3?s=96&d=robohash&r=g\",\"width\":96,\"height\":96,\"caption\":\"Cleuber Silva Hashimoto\"}},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/cleuber.com.br\\\/index.php\\\/author\\\/cleuberadmin#author\",\"url\":\"https:\\\/\\\/cleuber.com.br\\\/index.php\\\/author\\\/cleuberadmin\",\"name\":\"Cleuber Silva Hashimoto\",\"image\":{\"@type\":\"ImageObject\",\"@id\":\"https:\\\/\\\/cleuber.com.br\\\/index.php\\\/2016\\\/06\\\/15\\\/como-analisar-os-logs-usando-o-journalctl#authorImage\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/382cc2afc0e4994bd5ac25a6ca83ac6d76411a7b4d65e33bfdab32c831931eb3?s=96&d=robohash&r=g\",\"width\":96,\"height\":96,\"caption\":\"Cleuber Silva Hashimoto\"}},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/cleuber.com.br\\\/index.php\\\/2016\\\/06\\\/15\\\/como-analisar-os-logs-usando-o-journalctl#webpage\",\"url\":\"https:\\\/\\\/cleuber.com.br\\\/index.php\\\/2016\\\/06\\\/15\\\/como-analisar-os-logs-usando-o-journalctl\",\"name\":\"Como Analisar os Logs Usando o Journalctl - Cleuber.com.br\",\"description\":\"Todo administrador tem como rotina checar os servi\\u00e7os de um servidor atr\\u00e1s de problemas e ent\\u00e3o realizar medidas para corrigir os problemas. Algumas distribui\\u00e7\\u00f5es Linux usam o Rsyslog como sistema de log, e outras o Journalctl. As que usam o Systemd ao inv\\u00e9s do init ou outro similar, trazem o utilit\\u00e1rio Journalctl. E existe uma mudan\\u00e7a\",\"inLanguage\":\"pt-BR\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/cleuber.com.br\\\/#website\"},\"breadcrumb\":{\"@id\":\"https:\\\/\\\/cleuber.com.br\\\/index.php\\\/2016\\\/06\\\/15\\\/como-analisar-os-logs-usando-o-journalctl#breadcrumblist\"},\"author\":{\"@id\":\"https:\\\/\\\/cleuber.com.br\\\/index.php\\\/author\\\/cleuberadmin#author\"},\"creator\":{\"@id\":\"https:\\\/\\\/cleuber.com.br\\\/index.php\\\/author\\\/cleuberadmin#author\"},\"image\":{\"@type\":\"ImageObject\",\"url\":\"https:\\\/\\\/i0.wp.com\\\/cleuber.com.br\\\/wp-content\\\/uploads\\\/2016\\\/06\\\/journalctl.png?fit=1600%2C900&ssl=1\",\"@id\":\"https:\\\/\\\/cleuber.com.br\\\/index.php\\\/2016\\\/06\\\/15\\\/como-analisar-os-logs-usando-o-journalctl\\\/#mainImage\",\"width\":1600,\"height\":900},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/cleuber.com.br\\\/index.php\\\/2016\\\/06\\\/15\\\/como-analisar-os-logs-usando-o-journalctl#mainImage\"},\"datePublished\":\"2016-06-15T13:44:01-03:00\",\"dateModified\":\"2016-06-17T14:20:44-03:00\"},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/cleuber.com.br\\\/#website\",\"url\":\"https:\\\/\\\/cleuber.com.br\\\/\",\"name\":\"Cleuber.com.br\",\"description\":\"Linux e muito mais\",\"inLanguage\":\"pt-BR\",\"publisher\":{\"@id\":\"https:\\\/\\\/cleuber.com.br\\\/#person\"}}]}\n\t\t<\/script>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"Como Analisar os Logs Usando o Journalctl - Cleuber.com.br","description":"Todo administrador tem como rotina checar os servi\u00e7os de um servidor atr\u00e1s de problemas e ent\u00e3o realizar medidas para corrigir os problemas. Algumas distribui\u00e7\u00f5es Linux usam o Rsyslog como sistema de log, e outras o Journalctl. As que usam o Systemd ao inv\u00e9s do init ou outro similar, trazem o utilit\u00e1rio Journalctl. E existe uma mudan\u00e7a","canonical_url":"https:\/\/cleuber.com.br\/index.php\/2016\/06\/15\/como-analisar-os-logs-usando-o-journalctl","robots":"max-image-preview:large","keywords":"","webmasterTools":{"google-site-verification":"Npc_aRi1FHMW9AED2_44vmYJxqmmv3OsGYEUfARLcIY","miscellaneous":""},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"BlogPosting","@id":"https:\/\/cleuber.com.br\/index.php\/2016\/06\/15\/como-analisar-os-logs-usando-o-journalctl#blogposting","name":"Como Analisar os Logs Usando o Journalctl - Cleuber.com.br","headline":"Como Analisar os Logs Usando o Journalctl","author":{"@id":"https:\/\/cleuber.com.br\/index.php\/author\/cleuberadmin#author"},"publisher":{"@id":"https:\/\/cleuber.com.br\/#person"},"image":{"@type":"ImageObject","url":"https:\/\/i0.wp.com\/cleuber.com.br\/wp-content\/uploads\/2016\/06\/journalctl.png?fit=1600%2C900&ssl=1","width":1600,"height":900},"datePublished":"2016-06-15T13:44:01-03:00","dateModified":"2016-06-17T14:20:44-03:00","inLanguage":"pt-BR","mainEntityOfPage":{"@id":"https:\/\/cleuber.com.br\/index.php\/2016\/06\/15\/como-analisar-os-logs-usando-o-journalctl#webpage"},"isPartOf":{"@id":"https:\/\/cleuber.com.br\/index.php\/2016\/06\/15\/como-analisar-os-logs-usando-o-journalctl#webpage"},"articleSection":"Dicas e Tutoriais, Seguran\u00e7a, Servidores Linux, journalctl, logs, systemd"},{"@type":"BreadcrumbList","@id":"https:\/\/cleuber.com.br\/index.php\/2016\/06\/15\/como-analisar-os-logs-usando-o-journalctl#breadcrumblist","itemListElement":[{"@type":"ListItem","@id":"https:\/\/cleuber.com.br\/#listItem","position":1,"name":"Home","item":"https:\/\/cleuber.com.br\/","nextItem":{"@type":"ListItem","@id":"https:\/\/cleuber.com.br\/index.php\/category\/dicas-e-tutoriais#listItem","name":"Dicas e Tutoriais"}},{"@type":"ListItem","@id":"https:\/\/cleuber.com.br\/index.php\/category\/dicas-e-tutoriais#listItem","position":2,"name":"Dicas e Tutoriais","item":"https:\/\/cleuber.com.br\/index.php\/category\/dicas-e-tutoriais","nextItem":{"@type":"ListItem","@id":"https:\/\/cleuber.com.br\/index.php\/category\/dicas-e-tutoriais\/tutoriais-linux#listItem","name":"Linux"},"previousItem":{"@type":"ListItem","@id":"https:\/\/cleuber.com.br\/#listItem","name":"Home"}},{"@type":"ListItem","@id":"https:\/\/cleuber.com.br\/index.php\/category\/dicas-e-tutoriais\/tutoriais-linux#listItem","position":3,"name":"Linux","item":"https:\/\/cleuber.com.br\/index.php\/category\/dicas-e-tutoriais\/tutoriais-linux","nextItem":{"@type":"ListItem","@id":"https:\/\/cleuber.com.br\/index.php\/category\/dicas-e-tutoriais\/tutoriais-linux\/servidores-linux#listItem","name":"Servidores Linux"},"previousItem":{"@type":"ListItem","@id":"https:\/\/cleuber.com.br\/index.php\/category\/dicas-e-tutoriais#listItem","name":"Dicas e Tutoriais"}},{"@type":"ListItem","@id":"https:\/\/cleuber.com.br\/index.php\/category\/dicas-e-tutoriais\/tutoriais-linux\/servidores-linux#listItem","position":4,"name":"Servidores Linux","item":"https:\/\/cleuber.com.br\/index.php\/category\/dicas-e-tutoriais\/tutoriais-linux\/servidores-linux","nextItem":{"@type":"ListItem","@id":"https:\/\/cleuber.com.br\/index.php\/2016\/06\/15\/como-analisar-os-logs-usando-o-journalctl#listItem","name":"Como Analisar os Logs Usando o Journalctl"},"previousItem":{"@type":"ListItem","@id":"https:\/\/cleuber.com.br\/index.php\/category\/dicas-e-tutoriais\/tutoriais-linux#listItem","name":"Linux"}},{"@type":"ListItem","@id":"https:\/\/cleuber.com.br\/index.php\/2016\/06\/15\/como-analisar-os-logs-usando-o-journalctl#listItem","position":5,"name":"Como Analisar os Logs Usando o Journalctl","previousItem":{"@type":"ListItem","@id":"https:\/\/cleuber.com.br\/index.php\/category\/dicas-e-tutoriais\/tutoriais-linux\/servidores-linux#listItem","name":"Servidores Linux"}}]},{"@type":"Person","@id":"https:\/\/cleuber.com.br\/#person","name":"Cleuber Silva Hashimoto","image":{"@type":"ImageObject","@id":"https:\/\/cleuber.com.br\/index.php\/2016\/06\/15\/como-analisar-os-logs-usando-o-journalctl#personImage","url":"https:\/\/secure.gravatar.com\/avatar\/382cc2afc0e4994bd5ac25a6ca83ac6d76411a7b4d65e33bfdab32c831931eb3?s=96&d=robohash&r=g","width":96,"height":96,"caption":"Cleuber Silva Hashimoto"}},{"@type":"Person","@id":"https:\/\/cleuber.com.br\/index.php\/author\/cleuberadmin#author","url":"https:\/\/cleuber.com.br\/index.php\/author\/cleuberadmin","name":"Cleuber Silva Hashimoto","image":{"@type":"ImageObject","@id":"https:\/\/cleuber.com.br\/index.php\/2016\/06\/15\/como-analisar-os-logs-usando-o-journalctl#authorImage","url":"https:\/\/secure.gravatar.com\/avatar\/382cc2afc0e4994bd5ac25a6ca83ac6d76411a7b4d65e33bfdab32c831931eb3?s=96&d=robohash&r=g","width":96,"height":96,"caption":"Cleuber Silva Hashimoto"}},{"@type":"WebPage","@id":"https:\/\/cleuber.com.br\/index.php\/2016\/06\/15\/como-analisar-os-logs-usando-o-journalctl#webpage","url":"https:\/\/cleuber.com.br\/index.php\/2016\/06\/15\/como-analisar-os-logs-usando-o-journalctl","name":"Como Analisar os Logs Usando o Journalctl - Cleuber.com.br","description":"Todo administrador tem como rotina checar os servi\u00e7os de um servidor atr\u00e1s de problemas e ent\u00e3o realizar medidas para corrigir os problemas. Algumas distribui\u00e7\u00f5es Linux usam o Rsyslog como sistema de log, e outras o Journalctl. As que usam o Systemd ao inv\u00e9s do init ou outro similar, trazem o utilit\u00e1rio Journalctl. E existe uma mudan\u00e7a","inLanguage":"pt-BR","isPartOf":{"@id":"https:\/\/cleuber.com.br\/#website"},"breadcrumb":{"@id":"https:\/\/cleuber.com.br\/index.php\/2016\/06\/15\/como-analisar-os-logs-usando-o-journalctl#breadcrumblist"},"author":{"@id":"https:\/\/cleuber.com.br\/index.php\/author\/cleuberadmin#author"},"creator":{"@id":"https:\/\/cleuber.com.br\/index.php\/author\/cleuberadmin#author"},"image":{"@type":"ImageObject","url":"https:\/\/i0.wp.com\/cleuber.com.br\/wp-content\/uploads\/2016\/06\/journalctl.png?fit=1600%2C900&ssl=1","@id":"https:\/\/cleuber.com.br\/index.php\/2016\/06\/15\/como-analisar-os-logs-usando-o-journalctl\/#mainImage","width":1600,"height":900},"primaryImageOfPage":{"@id":"https:\/\/cleuber.com.br\/index.php\/2016\/06\/15\/como-analisar-os-logs-usando-o-journalctl#mainImage"},"datePublished":"2016-06-15T13:44:01-03:00","dateModified":"2016-06-17T14:20:44-03:00"},{"@type":"WebSite","@id":"https:\/\/cleuber.com.br\/#website","url":"https:\/\/cleuber.com.br\/","name":"Cleuber.com.br","description":"Linux e muito mais","inLanguage":"pt-BR","publisher":{"@id":"https:\/\/cleuber.com.br\/#person"}}]},"og:locale":"pt_BR","og:site_name":"Cleuber.com.br - Linux e muito mais","og:type":"article","og:title":"Como Analisar os Logs Usando o Journalctl - Cleuber.com.br","og:description":"Todo administrador tem como rotina checar os servi\u00e7os de um servidor atr\u00e1s de problemas e ent\u00e3o realizar medidas para corrigir os problemas. Algumas distribui\u00e7\u00f5es Linux usam o Rsyslog como sistema de log, e outras o Journalctl. As que usam o Systemd ao inv\u00e9s do init ou outro similar, trazem o utilit\u00e1rio Journalctl. E existe uma mudan\u00e7a","og:url":"https:\/\/cleuber.com.br\/index.php\/2016\/06\/15\/como-analisar-os-logs-usando-o-journalctl","article:published_time":"2016-06-15T16:44:01+00:00","article:modified_time":"2016-06-17T17:20:44+00:00","article:publisher":"https:\/\/www.facebook.com\/Cleubberstone","twitter:card":"summary_large_image","twitter:title":"Como Analisar os Logs Usando o Journalctl - Cleuber.com.br","twitter:description":"Todo administrador tem como rotina checar os servi\u00e7os de um servidor atr\u00e1s de problemas e ent\u00e3o realizar medidas para corrigir os problemas. Algumas distribui\u00e7\u00f5es Linux usam o Rsyslog como sistema de log, e outras o Journalctl. As que usam o Systemd ao inv\u00e9s do init ou outro similar, trazem o utilit\u00e1rio Journalctl. E existe uma mudan\u00e7a"},"aioseo_meta_data":{"post_id":"11029","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"BlogPosting","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"breadcrumb_settings":null,"limit_modified_date":false,"ai":null,"created":"2025-07-06 13:32:06","updated":"2025-07-07 04:23:07","seo_analyzer_scan_date":null,"focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"aioseo_breadcrumb":"<div class=\"aioseo-breadcrumbs\"><span class=\"aioseo-breadcrumb\">\n\t\t\t<a href=\"https:\/\/cleuber.com.br\/\" title=\"Home\">Home<\/a>\n\t\t<\/span><span class=\"aioseo-breadcrumb-separator\">\u00bb<\/span><span class=\"aioseo-breadcrumb\">\n\t\t\t<a href=\"https:\/\/cleuber.com.br\/index.php\/category\/dicas-e-tutoriais\" title=\"Dicas e Tutoriais\">Dicas e Tutoriais<\/a>\n\t\t<\/span><span class=\"aioseo-breadcrumb-separator\">\u00bb<\/span><span class=\"aioseo-breadcrumb\">\n\t\t\t<a href=\"https:\/\/cleuber.com.br\/index.php\/category\/dicas-e-tutoriais\/tutoriais-linux\" title=\"Linux\">Linux<\/a>\n\t\t<\/span><span class=\"aioseo-breadcrumb-separator\">\u00bb<\/span><span class=\"aioseo-breadcrumb\">\n\t\t\t<a href=\"https:\/\/cleuber.com.br\/index.php\/category\/dicas-e-tutoriais\/tutoriais-linux\/servidores-linux\" title=\"Servidores Linux\">Servidores Linux<\/a>\n\t\t<\/span><span class=\"aioseo-breadcrumb-separator\">\u00bb<\/span><span class=\"aioseo-breadcrumb\">\n\t\t\tComo Analisar os Logs Usando o Journalctl\n\t\t<\/span><\/div>","aioseo_breadcrumb_json":[{"label":"Home","link":"https:\/\/cleuber.com.br\/"},{"label":"Dicas e Tutoriais","link":"https:\/\/cleuber.com.br\/index.php\/category\/dicas-e-tutoriais"},{"label":"Linux","link":"https:\/\/cleuber.com.br\/index.php\/category\/dicas-e-tutoriais\/tutoriais-linux"},{"label":"Servidores Linux","link":"https:\/\/cleuber.com.br\/index.php\/category\/dicas-e-tutoriais\/tutoriais-linux\/servidores-linux"},{"label":"Como Analisar os Logs Usando o Journalctl","link":"https:\/\/cleuber.com.br\/index.php\/2016\/06\/15\/como-analisar-os-logs-usando-o-journalctl"}],"_links":{"self":[{"href":"https:\/\/cleuber.com.br\/index.php\/wp-json\/wp\/v2\/posts\/11029","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/cleuber.com.br\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/cleuber.com.br\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/cleuber.com.br\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/cleuber.com.br\/index.php\/wp-json\/wp\/v2\/comments?post=11029"}],"version-history":[{"count":0,"href":"https:\/\/cleuber.com.br\/index.php\/wp-json\/wp\/v2\/posts\/11029\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/cleuber.com.br\/index.php\/wp-json\/wp\/v2\/media\/11027"}],"wp:attachment":[{"href":"https:\/\/cleuber.com.br\/index.php\/wp-json\/wp\/v2\/media?parent=11029"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/cleuber.com.br\/index.php\/wp-json\/wp\/v2\/categories?post=11029"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/cleuber.com.br\/index.php\/wp-json\/wp\/v2\/tags?post=11029"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}