Linux logs and time quiz
Ten questions across the whole chapter. Each answer explains why. Aim for eight before moving on to chapter 12.
- Which file would you read for failed and successful logins?
- Which journalctl options show the errors of this boot for one service?
- How do you make the journal survive reboots?
- Which logrotate keyword keeps four old copies?
- Which command stops a manual clock change from being overwritten by NTP?
- A rule local5.* /var/log/myapp.log is added to /etc/rsyslog.d/. What else is needed?
- chronyc tracking shows "System time: 0.000004 seconds fast". What does it mean?
- Which command shows the time zone and the NTP state?
- Where do kernel boot messages go?
- What is the best first move when something is "broken"?