USB plug‑in spam is a classic annoyance on modern Linux boxes. Every time you drop a keyboard, a mouse, or even a USB‑SD card in, the kernel goes into a burst‑mode and writes a wall of messages to journalctl. On a busy server or a home‑lab machine that logs everything, those lines can quickly fill the journal, slow down log‑rotation, and make it hard to spot real problems.
Below is a hands‑on guide to quiet those messages without losing the useful diagnostics you need. The techniques work on recent systemd‑based distributions (Debian 12, Ubuntu 24.04, Arch 2026, etc.) and are safe for a security‑aware setup because they only suppress noise, not real alerts.
What the spam looks like
A typical burst looks like this:
Jun 12 14:32:01 host kernel: usb 1-2: new high-speed USB device number 12 using xhci_hcd
Jun 12 14:32:01 host kernel: usb 1-2: New USB device found, idVendor=046d, idProduct=c534
Jun 12 14:32:01 host kernel: usb 1-2: New USB device strings: Mfr=1, Product=2, SerialNumber=3
Jun 12 14:32:01 host kernel: usb 1-2: Product: USB Keyboard
Jun 12 14:32:01 host kernel: usb 1-2: Manufacturer: Logitech
Jun 12 14:32:01 host kernel: usb 1-2: SerialNumber: 0001
Jun 12 14:32:01 host kernel: usb 1-2: device descriptor contains wMaxPacketSize 0x40
Jun 12 14:32:01 host kernel: usb 1-2: device descriptor contains bNumConfigurations 1
Jun 12 14:32
See also
- When systemd‑journald ate my 2 GB SSD: how I capped it to 200 MB in a single config line
- Why my Borg backup kept failing after upgrading to Ubuntu 24.04 and how I fixed it
- Why My Home Server Keeps Crashing After Reboot: Fixing the Broken systemd Service for My Docker Compose Deployment
- Freeing a Full `/var/log` on a Home Lab Server with `journalctl --vacuum-time` and a One‑Line Bash Cleanup
- Why I keep a weekly backup copy of my home directory on an external SSD using rsync and how I test the restore