vi /etc/systemd/journald.conf

[Journal]
Storage=persistent
SystemMaxUse=100M
RuntimeMaxUse=50M
SystemMaxFileSize=50M
RuntimeMaxFileSize=10M
RateLimitInterval=30s
RateLimitBurst=500
Compress=yes
Seal=no
ForwardToSyslog=no
ForwardToWall=no
MaxRetentionSec=7day

systemctl restart systemd-journald

sudo systemctl mask systemd-journald@.service

journalctl --disk-usage

#manual clean:
journalctl --vacuum-size=200M
journalctl --vacuum-time=7d


journalctl --list-boots
journalctl -b <BOOT_ID>
journalctl -b -1 -p err..alert       # только ошибки
journalctl -b -1 | grep -E 'oom|killed|panic|segfault'
journalctl -b -1 | tail -200         # последние записи перед крахом