12

I am getting "Created slice user-0.slice." and "Starting Session 2025 of user root." in /var/log/messages in CentOS 7.  Can someone explain what they are?

[root@bew /]# tail -f /var/log/messages
May 26 21:20:01 bew systemd: Created slice user-0.slice.
May 26 21:20:01 bew systemd: Starting Session 2025 of user root.
May 26 21:20:01 bew systemd: Started Session 2025 of user root.
May 26 22:22:33 bew systemd: Stopping System Logging Service...
May 26 22:22:33 bew systemd: Starting System Logging Service...
May 26 22:22:33 bew systemd: Started System Logging Service.
May 26 22:30:01 bew systemd: Created slice user-0.slice.
May 26 22:30:01 bew systemd: Starting Session 2026 of user root.
May 26 22:30:01 bew systemd: Started Session 2026 of user root.
1
  • especially given that it times-out on debian shutdown
    – user289814
    Jul 29, 2015 at 14:44

2 Answers 2

5

These are low priority "info"-level messages related to session and resource management. You can avoid them via

# systemd-analyze set-log-level notice
1
  • Do these message mean that there was a successful login for user root?
    – qwertzguy
    Feb 25, 2018 at 20:32
2

According to Red Hat,

These messages are normal and expected -- they will be seen any time a user logs in.

If you don’t want to see these messages, Red Hat propose an alternate solution to prevent them from being logged while still keeping other info-level messages from the systemd service:

  1. Modify rsyslog to create a discard filter by running the following command:

    echo 'if $programname == "systemd" and ($msg contains "Starting Session" or $msg contains "Started Session" or $msg contains "Created slice" or $msg contains "Starting user-") then stop' >/etc/rsyslog.d/ignore-systemd-session-slice.conf
    
  2. Restart the rsyslog service:

    systemctl restart rsyslog
    
1
  • Had to change if statement to if $programname contains "systemd" because program name is called systemd-logind
    – Aidas
    Jan 15, 2019 at 10:20

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.