By default the systemd journal on RHEL may live only in memory. In that case journald writes to /run/log/journal/, a directory on a temporary file system that is emptied at every boot, so journalctl -b -1 (the previous boot) returns nothing. That makes it hard to investigate a crash or a failed boot after the fact. Making the journal persistent means storing it on disk in /var/log/journal/, and it is a standard RHCSA task.
Keep reading for free
Create a free StudyToCert account to read the rest of this lesson: 6 more sections, 5 key terms, a real-world example, an exam tip and self-check questions. Every lesson, lab and practice test is free with an account.