Veryfying systemd journal files with "journalctl --verify" reports corrupted journals with "FAIL: /var/log/journal/<journaldir>/user-<uid>.journal (Bad message)"
Issue
-
When verifying the systemd journal files with "--verify", some of the journal files are being marked as corrupted
# journalctl --verify Error was encountered while opening journal files: Invalid argument PASS: /var/log/journal/7f05594d144642409bdc68efc5295853/system.journal 000000: missing entry array File corruption detected at /var/log/journal/7f05594d144642409bdc68efc5295853/user-6106.journal:000000 (of 8388608 bytes, 0%). FAIL: /var/log/journal/7f05594d144642409bdc68efc5295853/user-6106.journal (Bad message) ... -
why have we corrupted files/messages in /var/log/journal?
Environment
- Red Hat Enterprise Linux (RHEL) 7.0 through 7.2
- systemd-219-19 and earlier
Subscriber exclusive content
A Red Hat subscription provides unlimited access to our knowledgebase of over 48,000 articles and solutions.
Welcome! Check out the Getting Started with Red Hat page for quick tours and guides for common tasks.
