/var/log/
location for System Logs storage
/var/log/auth.log
Debian directory for Authentication messages
/var/log/syslog
Debian based directory for all types of system events
/var/log/secure
Red Hat based directory for Authentication messages
Log Rotation
Practice of creating new versions of a log file
/etc/logrotate.d/
Configures log rotation
journalctl
● Enables the viewing and querying of log files
● Prints a journal log
etc/systemd/journald.conf
Used to configure journald log data
last
Displays the user’s history of login and logout events
lastlog
Lists all users and the last time a user logged in
last log retrieves information from ___________
/var/log/lastlog