Log - how to get a `/var/log/auth.log` equivalent

How do I get a log like Ubuntu's /var/log/auth.log going?

If it is being kept by default, please let me know where.

If I have to set it going, would this be the right place to start?

The only logging of that kind goes into the main syslog (logread), backed by a small ringbuffer.

2 Likes

Thank you. logread gave me what looks like last 24 hours. Is there more somewhere? Maybe in files in a directory?

No, as mentioned before, syslog goes into a fixed-size ringbuffer. If you want to retain log entries, you'll need to set up remote syslogging.

1 Like

Thank you again. I didn't know what "ringbuffer" meant.

This topic was automatically closed 10 days after the last reply. New replies are no longer allowed.