Common Linux operating system logon files include the following:
1)/var/log/secure: The file used to log on to the system to access data;
For example, pop3, ssh, telnet, and ftp are all recorded here.
2)/ar/log/wtmp: records the logon information, which has been encoded. Therefore, it must be parsed using last;
3)/var/log/message: errors in all startup systems of jihu are recorded here;
4)/var/log. boot. log: records the startup or shutdown information of some services that are started or shut down;
5)/var/log/maillog: records the access and exchange of emails;
6)/var/log/cron: used to record the content of the crontab service;
7)/var/log/httpd,/var/log/mysqld. log, and other files to record several different network service record files;
8)/var/log/acpid, ACPI-Advanced Configuration and Power Interface, indicating the Advanced Configuration and Power management interfaces.
D Indicates deamon. The acpid is the ACPI event daemon. That is, the message process of acpi. A service program used to control, obtain, and manage the status of acpi.
9)/var/run/utmp records the currently logged-on users;
10)/var/log/lastlog records the last logon information of each user;
11)/var/log/btmp records incorrect logon attempts;
12)/var/log/dmesg kernel log;
13)/var/log/cpus CPU processing information;
14)/var/log/syslog event records the monitoring program log;
15)/var/log/auth. log user authentication log;
16)/var/log/daemon. log system process log;
17)/var/log/mail. err email error message;
18)/var/log/mail.info email information;
19)/var/log/mail. warn mail warning information;
20) information generated by the/var/log/daemon. log System Monitoring Program;
21)/var/log/kern kernel information;
22) information generated by the false offline system of the/var/log/lpr line printer;