2

I've noticed, on machines where the journalctl logs are saved on disk, that on a reboot, I get a line between the message before and after the reboot happened like so:

blah blah blah -- Reboot -- blah blah blah

How does journalctl know to add that line at that location?

Improve this question

1 Answer 1

Reset to default
5

journalctl keeps track of the boot_id attached to logs, and when that changes, indicates that the system rebooted.

The boot_id is generated by the kernel, and can be retrieved from /proc/sys/kernel/random/boot_id.

Improve this answer
0

You must log in to answer this question.

Start asking to get answers

Find the answer to your question by asking.

Ask question

Explore related questions

See similar questions with these tags.