Question
Which of the following best describes journald?
- A. A system service that collects and stores logging data Correct
- B. A feature that creates crash dumps in case of kernel failure
- C. A service responsible for keeping the filesystem journal
- D. A service responsible for writing audit records to a disk
Explanation
systemd-journald is the systemd service that gathers log messages from the kernel, syslog and service output, and stores them in structured, indexed journals that you read with journalctl. Crash dumps come from kdump, and the filesystem journal is kept by the filesystem itself, for example ext4 or XFS. Audit records are written by auditd.
