Logs & incident diagnosis
Find the relevant service, boot and kernel evidence, correlate timestamps and preserve useful incident context.
How do I read recent logs for one Linux service?
Read a bounded time window of one systemd service’s logs, keep incident context, and distinguish missing logs from a healthy application.
Read the answer Logs & incident diagnosisHow do I inspect the previous boot after a Linux server restarts unexpectedly?
Find retained Linux boot records, inspect previous-boot warnings, and recognise when volatile logging prevents a complete restart investigation.
Read the answer Logs & incident diagnosisHow do I inspect kernel messages for storage, memory or driver errors?
Read bounded Linux kernel warnings from the current boot, preserve timestamps, and distinguish symptoms from confirmed hardware failure.
Read the answer Logs & incident diagnosisHow do I review SSH authentication events on a Linux server?
Review recent Linux SSH service events, select the correct distribution unit, and correlate failed logins without exposing credentials.
Read the answer Logs & incident diagnosisHow do I watch a Linux log file as new events are written?
Follow a selected Linux log in real time, handle rotation with tail -F, and stop watching without stopping the application.
Read the answer Logs & incident diagnosisHow do I correlate server logs when systems use different timezones?
Compare Linux logs in UTC with explicit time windows, account for clock skew, and avoid confusing timezone display with event order.
Read the answer Logs & incident diagnosisHow do I investigate a Linux server that takes too long to boot?
Inspect Linux boot timing and dependency chains with systemd-analyze, then connect delays to actual service and application readiness.
Read the answer Logs & incident diagnosisHow do I check journal disk usage before changing log retention?
Measure systemd journal space, inspect existing retention policy, and preserve incident evidence before making a scoped retention change.
Read the answer Logs & incident diagnosisHow do I find where a Linux application sends its logs?
Identify a Linux service’s configured output destinations and logging documentation without dumping environment secrets or guessing log paths.
Read the answer Logs & incident diagnosisWhat command output should I collect for a Linux server support incident?
Collect a concise Linux incident baseline with UTC timestamps, resources and relevant service errors while avoiding secrets and broad data dumps.
Read the answerNo matching question in this topic. Try a shorter phrase or search all server questions.