Retain only the past two days: 1 journalctl --vacuum-time=2d Retain only the past 500 MB: 1 journalctl --vacuum-size=500M