Veryfying systemd journal files with "journalctl --verify" reports corrupted journals with "FAIL: /var/log/journal/<journaldir>/user-<uid>.journal (Bad message)"
Issue
-
When verifying the systemd journal files with "--verify", some of the journal files are being marked as corrupted
# journalctl --verify Error was encountered while opening journal files: Invalid argument PASS: /var/log/journal/7f05594d144642409bdc68efc5295853/system.journal 000000: missing entry array File corruption detected at /var/log/journal/7f05594d144642409bdc68efc5295853/user-6106.journal:000000 (of 8388608 bytes, 0%). FAIL: /var/log/journal/7f05594d144642409bdc68efc5295853/user-6106.journal (Bad message) ...
-
why have we corrupted files/messages in /var/log/journal?
Environment
- Red Hat Enterprise Linux (RHEL) 7.0 through 7.2
- systemd-219-19 and earlier
Subscriber exclusive content
A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.