Linux Systemd Journalctl Logs Folder (/var/log/journal)

Bottom Line: It is 100% safe to vacuum and delete old systemd journal logs. Running journalctl --vacuum-time=7d or setting SystemMaxUse will NOT break Linux services or system startup.

What is the /var/log/journal Folder?

Located at /var/log/journal/ (or /run/log/journal/) on Linux distributions using systemd (Ubuntu, Debian, Fedora, Arch, RHEL), this folder is managed by systemd-journald.

Systemd collects binary event logs from the Linux kernel, system daemons, Nginx, Docker, and user services. Unlike traditional text log files in /var/log, journalctl logs are stored in indexed binary .journal files.

By default, systemd-journald is configured to use up to 10% of total filesystem capacity, easily consuming 5 GB to 20 GB+ of root partition storage.

Can You Delete Journalctl Logs?

✅ Yes, it is completely safe to vacuum.

• No server risk: Live system services stay 100% operational.
• Official systemd commands: journalctl includes built-in commands specifically designed to purge old logs safely.

How to Safely Clean Up Systemd Journal Logs

Method 1: Vacuum Logs Older Than 7 Days (Recommended)

1. Open your Linux terminal.
2. Vacuum journal logs older than 7 days:

   sudo journalctl --vacuum-time=7d

Method 2: Limit Journal Log Storage Size

To permanently cap journal log disk usage to 1 GB:

1. Vacuum logs to 1 GB immediately:

   sudo journalctl --vacuum-size=1G

2. Edit /etc/systemd/journald.conf:

   [Journal]
   SystemMaxUse=1G

3. Restart systemd-journald:

   sudo systemctl restart systemd-journald

Related Guides

• Learn about deleting Linux /var/log.
• How to clean up Linux Systemd Coredump.
• Check if you can clean Apache error logs.