Removing old journal archives by age | LinuC Level 1 102 Exam original practice question

1.09.2Basic

Delete archived journal files older than two weeks.

Do not target the active journal.

Which command is appropriate?

Hint 1: Focus on journal storage

Separate persistent storage, runtime-only storage, automatic selection, and disabled storage behavior.

Hint 2: Key terms

Review the short definitions of journal storage, persistence, rotation, and runtime behavior involved.

--vacuum-time: The option that removes archived journal data older than a period.
--vacuum-size: The option that reduces archived journal data to a size limit.
--vacuum-files: The option that limits the number of archived journal files kept.
--rotate: The operation that rotates the active journal file.
--delete: An option name containing a word associated with removal.

Detailed explanation

Incorrectjournalctl --since '2 weeks ago' --delete

Incorrect. journalctl has no generic search-result deletion form.

Correctjournalctl --vacuum-time=2weeks

Correct. It vacuums archives older than two weeks.

Incorrectjournalctl --vacuum-size=2weeks

Incorrect. --vacuum-size expects a byte size, not a duration.

Incorrectjournalctl --rotate=2weeks

Incorrect. --rotate archives active data and does not accept this retention duration.

An example you can run in a temporary verification environment.

journalctl --help | grep -E -- '--vacuum-time'

ageに基づくarchive削除のhelp行

Foundation review

Metadata that classifies a message source and its severity.

Whether systemd journal data survives a reboot and where it is stored.

A process that retains, renames, compresses, or removes log generations.

Question IDKL-102-1099

Environmentsystemd journalctl help / 削除なし

Last technical review2026-08-13

More practice in this area