/var/log/secure – Contains information related to authentication and authorization privileges. For example, sshd logs all the messages here, including unsuccessful login. /var/log/wtmp or /var/log/utmp – Contains login records. Using wtmp you can find out who is logged into the system.

What is secure log file?

The Security log records the following information or events: It records invalid user authentication attempts and the alarms/alerts generated due to the invalid authentication attempts – EIUA. It records any unauthorized attempt to initiate any process and to access resources, data, and transactions.

What are the logs in Linux?

Top 5 Linux log file groups in/var/log

• The main log file. a) /var/log/messages – Contains global system messages, including the messages that are logged during system startup. …
• Access and authentication. a) /var/log/auth. …
• Package install/uninstall. …
• System. …
• Applications.