Log Files

i am a new user of Suse Enterprise 9 .Before use Suse ,i also use Redhat linux ,so when i am using Suse SLE 9 ,then i just find var/log/messages !and i can't fins about the "secure" log file !so i can't easily to message about system log !!

okay so i cant really understand what the question is you are asking.

are you trying to find the secure log file???

Sorry ,my english is not good . my question is that in var/log folder ,i can't find the secure log file . because i am used to use Redhat linux ,so i also read secure log file .

Anyone can help me ?

Hi,

Do you mean the SYSLOG utility ? I don't know if it comes with SuSe, but any old version out there on the internet should work......

Robert

My meaning is that i want to check who enter to the server ,so i need to check the log file .In the redhat linux ,i can go to check var/log/secure file .Then i can learn that who was entering to my Server ,But now i am using SUSE SLE 9 ,i don't know what log file can i learn it ?

This must all be done as root.
Add the following line to /etc/syslog.conf

auth.* * * * * * * * * *-/var/log/secure

then restart syslog with the following command

 /etc/init.d/syslog restart

Attempt to login to your ssh deamon. Now observe that /var/log/secure is existent and populated.

So the /var/log/secure file logs only remote logins? To any service? I am just curious, as I may also wish to enable this.

So the /var/log/secure file logs only remote logins? To any service? I am just curious, as I may also wish to enable this.

Please clarify this question.

If your asking if syslog can log access to other services, such as samba or ftp, the answer is yes. I'm not sure what you mean by " only remote logins". If you mean to say that you'd like to log local logons that is also possible.

Anthro, if I add those lines as you suggested to the original poster, what exactly is logged in /var/log/secure ? Only ssh, or ftp and other services as well?

Access to these services seems to be logged in "/var/log/messages" and/or "/var/log/warn", but those contain lots of messages not related to logins as well (extra stuff I have to scroll through).