← Rules Catalog
lowloggingverified ✓✓rollback-safe

Configure journald to compress logs

journald-compress · RHEL ≥ 8 · 1 impl

Description

The systemd-journald service should be configured to compress log files to conserve disk space while maintaining log integrity.

Rationale

Log compression reduces disk usage and extends the retention period for logs within the same storage capacity, improving the ability to maintain audit trails.

Check → Remediate

Checkconfig_value
path:
/etc/systemd/journald.conf
key:
Compress
expected:
yes
Remediateconfig_set
path:
/etc/systemd/journald.conf
key:
Compress
value:
yes
separator:
=
reload:
systemd-journald

Framework references

CIS

rhel8 6.2.1.1.6rhel9 6.2.2.3rhel10 6.2.2.3

NIST 800-53

AU-4

Live verification

rhel10:checkrhel8:checkrhel9:checkrhel9:full
#journald#logging#compression#storage