Linux · syslog
Linux SSH authentication — auth.log / secure
OpenSSH authentication messages are routed through the host logging configuration.
Log sources tagged var-log
Log sources tagged var-log. Browse source profiles associated with var-log.
Matching source profiles
Linux · syslog
Linux sudo audit messages
sudo can record attempted privilege transitions and command context through syslog or its configured logs.
Linux Audit · audit
Linux Audit syscall
Kernel audit syscall records include identity, architecture, return status and process context.
Linux Audit · audit
Linux Audit command arguments
EXECVE records describe arguments associated with an audited exec call.
Linux Audit · audit
Linux Audit object paths
PATH records describe objects associated with a kernel audit event.
Linux Audit · audit
SELinux AVC denials
SELinux access-vector-cache messages record an access-control decision and security contexts.
systemd · json
systemd journal — JSON export
journalctl serializes journal entries to JSON; strings, arrays, byte arrays and null have distinct meanings.