There are three main logging subsystems in the Linux operating system:
(1) Connection time log
(2) Process statistics log
(3) System and service logs
The connection time log and the process statistic log are driven by the Rsyslog (Legacy syslog) log service, and the system and service logs are driven and managed by the corresponding network service;
System and Service logs
in addition to connection time logs and process statistics logs, many of the other log files of the system are managed by the log service with Rsyslog (Legacy syslog Service), which is driven by the Rsyslog log service by default on/var/log/path ;
Several of these important system logs:
/var/log/lastlog records the last time the user logged in successfully
/var/log/messages recording error messages for systems and services common to Linux systems
/var/log/secure recording changes and certifications for users and user groups
/var/log/boot.log boot time of the recording system
/var/log/btmp record the time/IP address of user login
/VAR/LOG/DMESG Recording of hardware loading
/var/log/cron Record Crond scheduled task service execution
The above log records have the RSYSLOGD service, which is controlled by the/etc/rsyslog.conf master profile and the/etc/sysconfig/rsyslog secondary configuration file.
Some of the log files are driven and configured by the service itself (not introduced), for example:
/var/log/http/*
/var/log/samba/*
.....
This article is from the "Margin with Wish" blog, please be sure to keep this source http://281816327.blog.51cto.com/907015/1615836
Linux System Log Management: (3) System and service logs