Dell PowerStore 3000X EMC PowerStore Service Scripts Guide - Page 72

System Journal Fields

Get Dell PowerStore 3000X PDF manuals and user guides View all Dell PowerStore 3000X manuals
Add to My Manuals
Save this manual to your list of manuals

Page 72 highlights

A System Journal Fields Information in the system journal are stored in fields. When you run the svc_journalctl, you can choose to display information from these fields or filter the output based on the information in these fields. This appendix describes the fields available for use in the journal: Topics: • Field descriptions Field descriptions The core logging framework relies on the systemd journal services provided by the underlying CoreOS operating system. In addition to the default fields available with systemd journal in CoreOS, there are custom fields available for use with the cluster. The following table lists the descriptions of all the fields available for use. NOTE: For more information on the default fields, refer to https://www.freedesktop.org/software/systemd/man/ systemd.journal-fields.html#. Table 1. Journal field descriptions Type Name Default __CURSOR Default __MONOTONIC_TIMESTAMP Default Default Default Default Default Default Default Default Default Default Default Default Default Default __REALTIME_TIMESTAMP _AUDIT_LOGINUID, _AUDIT_SESSION _BOOT_ID _CAP_EFFECTIVE _CMDLINE _COMM _EXE _GID _HOSTNAME _KERNEL_DEVICE _KERNEL_SUBSYSTEM _LINE_BREAK _MACHINE_ID _PID Description Unique identifier that describes the position of the entry in the journal. The monotonic clock timestamp indicating the time elapsed between a certain event and the time when the entry in the journal occurred. The wall clock timestamp indicating the point in time when the entry was logged in the journal. The session and login UID of the process from where the journal entry originates from. The kernel boot ID of the boot in which the message was generated. The effective capabilities of the process from where the journal entry originates from. The command line of the process the journal entry originates from The name of the process the journal entry originates from. The executable path of the process the journal entry originates from. The group ID of the process the journal entry originates from. The name of the originating host. The name of the kernel device. The name of the kernel subsystem. Indicates that the log message in the standard output/error stream was not terminated with a normal newline character. Machine ID of the host from where the journal entry originates from. The process ID of the process the journal entry originates from. 72 System Journal Fields

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58
  • 59
  • 60
  • 61
  • 62
  • 63
  • 64
  • 65
  • 66
  • 67
  • 68
  • 69
  • 70
  • 71
  • 72
  • 73
  • 74
System Journal Fields
Information in the system journal are stored in fields. When you run the svc_journalctl, you can choose to display information from these
fields or filter the output based on the information in these fields. This appendix describes the fields available for use in the journal:
Topics:
•
Field descriptions
Field descriptions
The core logging framework relies on the systemd journal services provided by the underlying CoreOS operating system. In addition to the
default fields available with systemd journal in CoreOS, there are custom fields available for use with the cluster. The following table lists
the descriptions of all the fields available for use.
NOTE:
For more information on the default fields, refer to
systemd.journal-fields.html#
.
Table 1. Journal field descriptions
Type
Name
Description
Default
__CURSOR
Unique identifier that describes the position of the entry in the
journal.
Default
__MONOTONIC_TIMESTAMP
The monotonic clock timestamp indicating the time elapsed
between a certain event and the time when the entry in the journal
occurred.
Default
__REALTIME_TIMESTAMP
The wall clock timestamp indicating the point in time when the
entry was logged in the journal.
Default
_AUDIT_LOGINUID, _AUDIT_SESSION
The session and login UID of the process from where the journal
entry originates from.
Default
_BOOT_ID
The kernel boot ID of the boot in which the message was
generated.
Default
_CAP_EFFECTIVE
The effective capabilities of the process from where the journal
entry originates from.
Default
_CMDLINE
The command line of the process the journal entry originates from
Default
_COMM
The name of the process the journal entry originates from.
Default
_EXE
The executable path of the process the journal entry originates
from.
Default
_GID
The group ID of the process the journal entry originates from.
Default
_HOSTNAME
The name of the originating host.
Default
_KERNEL_DEVICE
The name of the kernel device.
Default
_KERNEL_SUBSYSTEM
The name of the kernel subsystem.
Default
_LINE_BREAK
Indicates that the log message in the standard output/error stream
was not terminated with a normal newline character.
Default
_MACHINE_ID
Machine ID of the host from where the journal entry originates
from.
Default
_PID
The process ID of the process the journal entry originates from.
A
72
System Journal Fields