This article covers how to install and configure Rsyslog Server and Client on Ubuntu 20.04 LTS Focal Fossa system. In fact, Checking logs is an important activity to see what's happening on your Linux servers, especially when you are trying to locate an issue. In Rsyslog, the config files remain the same as Syslog. That simply means you can copy a syslog.conf file directly into rsyslog.conf and it will work.
The syslog-ng, FluentD, Logstash, GreyLog2, and Logagent, Filebeat are the other alternatives for Rsyslog.
Directory where different sorts of logs stored in a Linux system:
- /var/log/syslog - Stores all startup messages, application startup messages etc. Practically stores all global system logs.
- /var/log/cron - The Cron jobs are basically kind of scheduled and automated task created in the system, that runs periodically and repeatedly. You can see what this logs directory would store.
- /var/log/kern.log - it stores kernel logs. No matter what logs they are. Event logs, errors, or warning logs.
- /var/log/auth.log - Authentication logs.
- /var/log.boot.log - System boot logs.
- /var/log/mysql.d - Mysql logs.
- /var/log/httpd - Apache logs directory.
- /var/log/maillog - Mail server logs.