Veryfying systemd journal files with "journalctl --verify" reports corrupted journals with "FAIL: /var/log/journal/<journaldir>/user-<uid>.journal (Bad message)"

Solution Unverified - Updated -

Issue

  • When verifying the systemd journal files with "--verify", some of the journal files are being marked as corrupted

    # journalctl --verify
    Error was encountered while opening journal files: Invalid argument
    PASS: /var/log/journal/7f05594d144642409bdc68efc5295853/system.journal
    000000: missing entry array
    File corruption detected at /var/log/journal/7f05594d144642409bdc68efc5295853/user-6106.journal:000000 (of 8388608 bytes, 0%).
    FAIL: /var/log/journal/7f05594d144642409bdc68efc5295853/user-6106.journal (Bad message)
    ...
    
  • why have we corrupted files/messages in /var/log/journal?

Environment

  • Red Hat Enterprise Linux (RHEL) 7.0 through 7.2
  • systemd-219-19 and earlier

Subscriber exclusive content

A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.

Current Customers and Partners

Log in for full access

Log In

New to Red Hat?

Learn more about Red Hat subscriptions

Using a Red Hat product through a public cloud?

How to access this content