By default, the journal doesn't store log files on disk, only in memory or the /run/log/journal directory. This is sufficient for the recent log history (with the journal) but not for long-term log retention should you decide to go with journal only and not with any other syslog solution.
Configuring journald to keep more logs than memory allows is fairly simple, as follows:
Open
/etc/systemd/journald.confwith your favorite text editor with root permissions by executing the following command:~]# vim /etc/systemd/journald.confEnsure that the line containing
Storageis either remarked or set toautoorpersistentand save it, as follows:Storage=auto
If you select
auto, the journal directory needs to be manually created. The following command would be useful for this:~]# mkdir -p /var/log/journalNow, restart the journal service by executing the following command:
~]# systemctl restart systemd-journald