[systemd-bugs] [Bug 86193] New: journalctl misses entries using executable filter

[bugzilla-daemon at freedesktop.org]

https://bugs.freedesktop.org/show_bug.cgi?id=86193

            Bug ID: 86193
           Summary: journalctl misses entries using executable filter
           Product: systemd
           Version: unspecified
          Hardware: x86-64 (AMD64)
                OS: Linux (All)
            Status: NEW
          Severity: normal
          Priority: medium
         Component: general
          Assignee: systemd-bugs at lists.freedesktop.org
          Reporter: doak at gmx.de
        QA Contact: systemd-bugs at lists.freedesktop.org

Created attachment 109332
  --> https://bugs.freedesktop.org/attachment.cgi?id=109332&action=edit
Verbose output of case 1 (concrete boot specified)

'journalctl <some executable>' misses entries depending on other arguments.
In contrast if no executable is specified, listed entries (filtered with
'grep') are complete.

'journalctl --verify' does not report any failure.

I noticed this bug with version 216-3 and just confirmed it with version
version 217 bundled with Arch Linux.


Case 1: Entry of thunderbird is only listed if concrete boot is specified:
(please refer to attachment for verbose output)
----------------------------
root at laurin:~# journalctl -b bd67248b3a964252a0e14fe6adb0620f
/lib/systemd/systemd-coredump
-- Logs begin at Tue 2014-09-09 16:09:26 CEST, end at Wed 2014-11-12 11:13:36
CET. --
Oct 30 06:24:48 laurin systemd-coredump[4788]: Process 464 (thunderbird) of
user 1000 dumped core.
Oct 30 07:38:30 laurin systemd-coredump[5389]: Process 5388 (cat) of user 0
dumped core.
Oct 30 08:31:13 laurin systemd-coredump[5700]: Process 5699 (cat) of user 0
dumped core.
----------------------------
root at laurin:~# journalctl /lib/systemd/systemd-coredump                   
-- Logs begin at Tue 2014-09-09 16:09:26 CEST, end at Wed 2014-11-12 11:13:36
CET. --
[...]
-- Reboot --
Oct 20 08:40:32 laurin systemd-coredump[6898]: Process 2484 (luminance-hdr) of
user 1000 dumped core.
Oct 20 10:18:30 laurin systemd-coredump[10249]: Process 1693 (hugin) of user
1000 dumped core.
Oct 20 10:32:49 laurin systemd-coredump[10739]: Process 10738 (feh) of user
1000 dumped core.
Oct 20 11:24:57 laurin systemd-coredump[11002]: Process 10999 (feh) of user
1000 dumped core.
-- Reboot --
Oct 28 08:56:45 laurin systemd-coredump[1959]: Process 1958 (light-locker) of
user 0 dumped core.
-- Reboot --
Oct 30 07:38:30 laurin systemd-coredump[5389]: Process 5388 (cat) of user 0
dumped core.
Oct 30 08:31:13 laurin systemd-coredump[5700]: Process 5699 (cat) of user 0
dumped core.
----------------------------


Case 2: Inconsistent output using '--since'; Listing of Oct 28th is not a
superset of Oct 30th.
(No difference if '_EXE=/usr/lib/systemd/systemd-coredump' is used.)
----------------------------
root at laurin:~# journalctl --since=2014-10-28 /lib/systemd/systemd-coredump
-- Logs begin at Tue 2014-09-09 16:09:26 CEST, end at Wed 2014-11-12 11:13:36
CET. --
Oct 28 08:56:45 laurin systemd-coredump[1959]: Process 1958 (light-locker) of
user 0 dumped core.
-- Reboot --
Oct 30 07:38:30 laurin systemd-coredump[5389]: Process 5388 (cat) of user 0
dumped core.
Oct 30 08:31:13 laurin systemd-coredump[5700]: Process 5699 (cat) of user 0
dumped core.
----------------------------
root at laurin:~# journalctl --since=2014-10-30 /lib/systemd/systemd-coredump
-- Logs begin at Tue 2014-09-09 16:09:26 CEST, end at Wed 2014-11-12 11:13:36
CET. --
Oct 30 06:24:48 laurin systemd-coredump[4788]: Process 464 (thunderbird) of
user 1000 dumped core.
Oct 30 07:38:30 laurin systemd-coredump[5389]: Process 5388 (cat) of user 0
dumped core.
Oct 30 08:31:13 laurin systemd-coredump[5700]: Process 5699 (cat) of user 0
dumped core.
-- Reboot --
Nov 04 16:37:45 laurin systemd-coredump[4163]: Process 3657 (evince) of user
1000 dumped core.
-- Reboot --
Nov 11 15:28:36 laurin systemd-coredump[8148]: Process 7965 (thunderbird) of
user 1000 dumped core.
----------------------------

Maybe this bug report is related:
https://bugs.freedesktop.org/show_bug.cgi?id=64296


Regards,
doak

-- 
You are receiving this mail because:
You are the QA Contact for the bug.
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.freedesktop.org/archives/systemd-bugs/attachments/20141112/b77f4d47/attachment.html>