highservicesverified ✓rollback-safe
Enable journald service
journald-service-enabled · RHEL ≥ 8 · 1 impl
Description
The systemd-journald service must be enabled and running to collect system logs. Journald is the default logging service on modern Linux systems using systemd.
Rationale
System logging is critical for security monitoring, incident response, and troubleshooting. Without journald, security-relevant events may not be recorded, hindering forensic analysis.
Check → Remediate
Checkservice_state
- name:
- systemd-journald
- active:
- true
- enabled:
- true
Remediateservice_enabled
- name:
- systemd-journald
Framework references
CIS
rhel9 6.2.1.1
STIG
V-257783 / RHEL-09-211040
NIST 800-53
AU-2AU-3AU-12
Live verification
rhel9:check
#service#logging#journald#systemd