Understanding journald on Ubuntu
On Ubuntu systems, the journald and rsyslog services are both enabled by default, and they both run as completely independent entities. The journald logs are persistent, which means that they are permanently stored on disk, instead of getting deleted every time you shut down the machine. The rsyslog log files are also present, and they get rotated every week.
Two things make the journald log files persistent. First, is the very first configuration option in the /etc/systemd/journald.conf file, which looks like this:
[Journal] #Storage=auto . . . . . .
When you look at this whole file, you'll see that every line in it is commented out. This just means that all of these options have been set to their default values. To change something, just uncomment the line and change the value. However, we don't need to do anything with this #Storage=auto line. The auto here means that if the /var/log/journal/ directory exists, then journald will...
