Skip to content

Systemd-journal-remote

systemd-journal-remote.service, systemd-journal-remote.socket, systemd-journal-remote — Receive journal messages over the network

Description

systemd-journal-remote is a command to receive serialized journal events and store them to journal files. Input streams are in the Journal Export Format, i.e. like the output from journalctl --output=export. For transport over the network, this serialized stream is usually carried over an HTTPS connection.

systemd-journal-remote.service is a system service that uses systemd-journal-remote to listen for connections. systemd-journal-remote.socket configures the network address that systemd-journal-remote.service listens on. By default, this is port 19532. What connections are accepted and how the received data is stored can be configured through the journal-remote.conf(5) configuration file.

Install 

sudo apt install systemd-journal-remote

systemd-journal-gatewayd

HTTP server for journal events 

sudo systemctl start systemd-journal-gatewayd.service
sudo systemctl status systemd-journal-gatewayd.service

설치 후 http://localhost:19531/ 로 접속 가능하다.

Examples

Retrieve events from this boot from local journal in Journal Export Format: 

curl --silent -H'Accept: application/vnd.fdo.journal' \
       'http://localhost:19531/entries?boot'

Listen for core dumps: 

curl 'http://localhost:19531/entries?follow&MESSAGE_ID=fc2e22bc6ee647b6b90729ab34a250b1'

See also

Favorite site