From the course: Network Forensics

Unlock the full course today

Join today to access over 22,600 courses taught by industry experts or purchase this course individually.

syslog

syslog

From the course: Network Forensics

Start my 1-month free trial

syslog

“

- [Narrator] Linux uses a consolidated and systematic ordered logging mechanism called 'syslog'. 'Syslog' supports both local, and remote log collection. Each instance of Linux installation comes with 'syslog' or it's variation, pre-installed by default, which manages all the logs generated by software running on the host. Therefore, providing a single point of management. What we're going to use is 'rsyslog', which is a more recent variation of 'syslog'. The 'rsyslog' configuration file at the '/etc/rsyslog.conf' directory. Let's open the file by typing "nano" "/etc/" "rsyslog" ".conf". In the beginning of the file it says that default logging rules can be found in "/etc/rsyslog.d/50-default.conf". Let's check this out. First, exit out of the current file. Press "Ctrl-X". As the comment stated, the location is where 'rsyslog' keeps all it's default rules. Type "nano /etc/rsyslog.d/50-default.conf". Press Enter. Take a closer look at the line that says "mail.err", and "tab…

Contents