rsyslog — system logs

Cheat sheet

• tail -f /var/log/syslog general system log in real time
• tail -f /var/log/auth.log logins, sudo, ssh in real time
• sudo rsyslogd -N1 check the config syntax
• logger -p auth.info "msg" write a test entry to syslog
• sudo systemctl restart rsyslog apply config changes