1)/var/log/secure: Record log in system to access data files;
For example: POP3,SSH,TELNET,FTP, etc. will be recorded here.
2)/var/log/wtmp: Record login This information record, has been encoded, so must be resolved with last;
Example: Lastb | awk ' {print $} ' | Sort | uniq-c | Sort-nr | More
3)/var/log/message: Almost all boot system errors will be recorded here;
4)/var/log.boot.log: Record some startup or shutdown of some services to display the start or shutdown information;
5)/var/log/maillog: Record the access and correspondence of mail;
6)/var/log/cron: Used to record the contents of this service crontab;
7)/var/log/httpd,/var/log/mysqld.log and so on file, record several different network service record file;
8)/var/log/acpid, acpi-advanced Configuration and Power Interface, represents the advanced configurations and power management interfaces.
The following D represents Deamon. Acpid is also the ACPI event daemon. This is the ACPI message process. A service program used to control, obtain, and manage the state of ACPI.
9)/var/run/utmp records the user who is now logged in;
/var/log/lastlog record each user's last login information;
One)/var/log/btmp log the wrong login attempt;
/VAR/LOG/DMESG kernel log;
/var/log/cpus CPU processing information;
/var/log/syslog Event record monitoring program log;
/var/log/auth.log user authentication log;
()/var/log/daemon.log system process log;
()/var/log/mail.err mail error message;
/var/log/mail.info Mail information;
/var/log/mail.warn Mail warning message;
(/var/log/daemon.log) The information generated by the system monitoring program;
)/var/log/kern the information generated by the kernel;
(/VAR/LOG/LPR) The information generated by the spool system of the printer;
Linux/var/log of the various log files under the detailed