Log files

rfc5424 - The Syslog Protocol

Log files in Slackware Linux

Path	Program	Configuration	Rotation
/var/log/modsec_audit.log	ModSecurity	SecAuditLog
/var/log/pacct	Process accunting
/var/log/boot	bootlogd
/var/log/sbopkg/sbopkg-build-log	sbopkg
/var/log/httpd/*	httpd		/etc/logrotate.d/httpd
/var/log/sulog	su	login.defs:SULOG_FILE
/var/log/clamav/clamd.log	ClamAV	clamd.conf:LogFile	clamav.logrotate
/var/log/clamav/freshclam.log	ClamAV	rc.clamav	clamav.logrotate
/var/log/sudo.log	sudo	sudoers:logfile
/var/log/dmesg	/etc/rc.d/rc.M
/var/log/apcupsd.events	apcupsd		apcupsd.logrotate
/var/log/{messages,syslog,debug,secure,cron,maillog,spooler}	sysklogd		/etc/logrotate.d/syslog
/var/log/rkhunter.log	rkhunter
/var/log/rkhunter.log.old	rkhunter
/var/log/rkhunter.log.YYYY-MM-DD_HH:MM:SS	rkhunter
/var/log/Xorg.0.log	X.Org
/var/log/Xorg.0.log.old	X.Org
/var/log/[bw]tmp	Shadow suite
/var/run/utmp	Shadow suite
/var/log/{fail,last}log	Shadow suite
/var/log/lynis{-report.dat,.log}	Lynis
/var/log/tiger/*	Tiger
/var/log/pkgtools/	pkgtools
/var/log/audit/audit.log	auditd	auditd.conf:log_file
/var/log/cups/	Cups
/var/log/ConsoleKit/	ConsoleKit
/var/log/sa/*	System accounting
/var/log/{usr,sav}acct	Process accounting
/var/log/uucp/*	uucp
	MIT Kerberos	kdc.conf:logging
/var/log/docker.log	Docker	rc.docker:DOCKER_LOG
/var/log/mcelog	mcelog		/etc/logrotate.d/mcelog
/var/log/ntp	ntp		/etc/logrotate.d/ntp

Facilities

Default syslog facilities for various programs.

Facility	Software
local6	ClamAV
local4	OpenLDAP slapd (debugging statements and operation statistics)
local7	Nginx
local7	THOR Lite
user	Kismet
auth	MIT Kerberos KDC

TrueNAS

/etc/krb5.conf:

#
# krb5.conf(5) - configuration file for Kerberos 5
# $FreeBSD$
#

[logging]
            default = SYSLOG:INFO:LOCAL7