清理CentOS 7系统 journal日志
<p>在CentOS 7开始使用的systemd使用了journal日志，这个日志的管理方式和以往使用syslog的方式不同，可以通过管理工具维护。</p><p><strong>Linux log日志占用</strong></p>
<p>Linux使用df -h检查磁盘文件，可以看到/run目录下有日志目录/run/log/journal，占用了数G空间。</p>
<p>或者直接在相应目录下执行du --max-depth=1 -h</p>
<div class="cnblogs_code">
<pre>Filesystem Size Used Avail Use%<span style="color: rgba(0, 0, 0, 1)"> Mounted on
</span>/dev/mapper/centos-root <span style="color: rgba(128, 0, 128, 1)">8</span>.5G <span style="color: rgba(128, 0, 128, 1)">4</span>.2G <span style="color: rgba(128, 0, 128, 1)">4</span>.4G <span style="color: rgba(128, 0, 128, 1)">49</span>% /<span style="color: rgba(0, 0, 0, 1)">
tmpfs 16G </span><span style="color: rgba(128, 0, 128, 1)">1</span>.6G 15G <span style="color: rgba(128, 0, 128, 1)">11</span>% /<span style="color: rgba(0, 0, 0, 1)">run
# </span><span style="color: rgba(0, 0, 255, 1)">du</span> --max-depth=<span style="color: rgba(128, 0, 128, 1)">1</span> -<span style="color: rgba(0, 0, 0, 1)">h
254M .</span>/php-<span style="color: rgba(0, 0, 0, 1)">fpm
36K .</span>/<span style="color: rgba(0, 0, 0, 1)">anaconda
256K .</span>/<span style="color: rgba(0, 0, 0, 1)">redis
</span><span style="color: rgba(128, 0, 128, 1)">4</span>.0K ./<span style="color: rgba(0, 0, 0, 1)">chrony
</span><span style="color: rgba(128, 0, 128, 1)">4</span>.0K ./<span style="color: rgba(0, 0, 0, 1)">ppp
</span><span style="color: rgba(128, 0, 128, 1)">4</span>.0K ./<span style="color: rgba(0, 0, 0, 1)">ntpstats
256K .</span>/<span style="color: rgba(0, 0, 0, 1)">letsencrypt
</span><span style="color: rgba(128, 0, 128, 1)">4</span>.0G ./<span style="color: rgba(0, 0, 0, 1)">journal
34M .</span>/<span style="color: rgba(0, 0, 0, 1)">audit
24K .</span>/<span style="color: rgba(0, 0, 0, 1)">tuned
</span><span style="color: rgba(128, 0, 128, 1)">4</span>.6G .</pre>
</div>
<p>在日志目录下有很多历史累积的日志。</p>
<p> </p>
<p><strong>Linux log日志清理</strong><br>检查当前journal使用磁盘量</p>
<div class="cnblogs_code">
<pre>journalctl --disk-usage</pre>
</div>
<p>清理方法可以采用按照日期清理，或者按照允许保留的容量清理，只保存2天的日志，最大500M</p>
<div class="cnblogs_code">
<pre>journalctl --vacuum-<span style="color: rgba(0, 0, 255, 1)">time</span>=<span style="color: rgba(0, 0, 0, 1)">2d
journalctl </span>--vacuum-size=500M</pre>
</div>
<p>如果要手工删除日志文件，则在删除前需要先轮转一次journal日志</p>
<div class="cnblogs_code">
<pre>systemctl <span style="color: rgba(0, 0, 255, 1)">kill</span> --<span style="color: rgba(0, 0, 255, 1)">kill</span>-<span style="color: rgba(0, 0, 255, 1)">who</span>=main --signal=SIGUSR2 systemd-journald.service</pre>
</div>
<p>要启用日志限制持久化配置，可以修改 /etc/systemd/journald.conf</p>
<div class="cnblogs_code">
<pre>SystemMaxUse=<span style="color: rgba(0, 0, 0, 1)">16M
ForwardToSyslog</span>=no</pre>
</div>
<p>然后重启</p>
<div class="cnblogs_code">
<pre>systemctl restart systemd-journald.service</pre>
</div>
<p>检查journal是否运行正常以及日志文件是否完整无损坏</p>
<div class="cnblogs_code">
<pre>journalctl --verify</pre>
</div>
<p> </p>
<p>原文链接：https://www.uedbox.com/post/58901/</p>
<p> </p>
</div>
<div id="MySignature" role="contentinfo">
<div style=" display: block;background-color: #e8e8e8;padding: 10px;font-size: 14px;">
<strong>个人推荐</strong><br>
萨哈拉单板滑雪https://sahala.suanhetao.com
</div><br><br>
来源：https://www.cnblogs.com/michaelluthor/p/11995570.html
頁:
[1]