[Bug]: Netdata plugin systemd-journal eat disk space about netdata HOT 6 CLOSED

Hi, @CZAirwolf. This is the systemd journal, not Netdata. Looking at your configuration, I think it was applied to the default namespace and not the netdata namespace. Check out the systemd journal documentation - how to apply configuration to namespaces.

from netdata.

Installation of the netdata package from netdata.cloud will create /etc/logrotate.d/netdata for log handling. When the same package configure systemd journal for logging in the netdata namespace, why you want ignore those journal netdata logs???

from netdata.

The logrotate file has nothing to do with systemd journal logs. systemd-journald (not Netdata) is responsible for rotating. As I mentioned above, your configuration is only for the default systemd journal namespace.

from netdata.

Please remove /etc/logrotate.d/netdata, it's not netdata problem, rsyslog (etc) is responsible for rotating.

Really stupid answer.

If you create dedicated logs (especially not covered by default settings), you are responsible for ensuring the rotation.

from netdata.

You are confusing text log files (/var/log/) and systemd journal binary logs (/var/log/journal). logrotate rotates and compresses log files (/var/log/netdata/*), but Netdata does not write to files when running as a systemd service.

systemd-journald (systemd's logging daemon) is writing/rotating /var/log/netdata/*.

I have limited journal logs via /etc/systemd/journald.conf.d# cat override.con

from man journald.conf

The systemd-journald instance managing the default namespace is configured by /etc/systemd/journald.conf and associated drop-ins.
Instances managing other namespaces read /etc/systemd/[email protected] and associated drop-ins with the namespace identifier filled in.

^^ That is why I said that

Looking at your configuration, I think it was applied to the default namespace and not the netdata namespace

from netdata.

@Ferroin, hey. The default limit for journal files (SystemMaxUse/RuntimeMaxUse) is 4GB. I think it makes sense to install /etc/systemd/[email protected] with smaller values. What do you think?

from netdata.