Answer the question
In order to leave comments, you need to log in
Where is auth.log syslog kern.log etc?
Ubuntu Linux 14.04 clean install.
Logs auth.log, kern.log, syslog etc are missing from /var/log
/etc/rsyslog.conf:
# /etc/rsyslog.conf Configuration file for rsyslog.
#
# For more information see
# /usr/share/doc/rsyslog-doc/html/rsyslog_conf.html
#
# Default logging rules can be found in /etc/rsyslog.d/50-default.conf
#################
#### MODULES ####
#################
$ModLoad imuxsock # provides support for local system logging
$ModLoad imklog # provides kernel logging support
#$ModLoad immark # provides --MARK-- message capability
# provides UDP syslog reception
#$ModLoad imudp
#$UDPServerRun 514
# provides TCP syslog reception
#$ModLoad imtcp
#$InputTCPServerRun 514
###########################
#### GLOBAL DIRECTIVES ####
###########################
#
# Use traditional timestamp format.
# To enable high precision timestamps, comment out the following line.
#
$ActionFileDefaultTemplate RSYSLOG_TraditionalFileFormat
# Filter duplicated messages
$RepeatedMsgReduction on
#
# Set the default permissions for all log files.
#
$FileOwner syslog
$FileGroup adm
$FileCreateMode 0640
$DirCreateMode 0755
$Umask 0022
$PrivDropToUser syslog
$PrivDropToGroup syslog
#
# Where to place spool and state files
#
$WorkDirectory /var/spool/rsyslog
#
# Include all config files in /etc/rsyslog.d/
#
$IncludeConfig /etc/rsyslog.d/*.conf
# Default rules for rsyslog.
#
# For more information see rsyslog.conf(5) and /etc/rsyslog.conf
#
# First some standard log files. Log by facility.
#
auth,authpriv.* /var/log/auth.log
*.*;auth,authpriv.none -/var/log/syslog
#cron.* /var/log/cron.log
#daemon.* -/var/log/daemon.log
kern.* -/var/log/kern.log
#lpr.* -/var/log/lpr.log
mail.* -/var/log/mail.log
#user.* -/var/log/user.log
#
# Logging for the mail system. Split it up so that
# it is easy to write scripts to parse these files.
#
#mail.info -/var/log/mail.info
#mail.warn -/var/log/mail.warn
mail.err /var/log/mail.err
#
# Logging for INN news system.
#
news.crit /var/log/news/news.crit
news.err /var/log/news/news.err
news.notice -/var/log/news/news.notice
#
# Some "catch-all" log files.
#
#*.=debug;\
# auth,authpriv.none;\
# news.none;mail.none -/var/log/debug
#*.=info;*.=notice;*.=warn;\
# auth,authpriv.none;\
# cron,daemon.none;\
# mail,news.none -/var/log/messages
#
# Emergencies are sent to everybody logged in.
#
*.emerg :omusrmsg:*
#
# I like to have messages displayed on the console, but only on a virtual
# console I usually leave idle.
#
#daemon,mail.*;\
# news.=crit;news.=err;news.=notice;\
# *.=debug;*.=info;\
# *.=notice;*.=warn /dev/tty8
# The named pipe /dev/xconsole is for the `xconsole' utility. To use it,
# you must invoke `xconsole' with the `-file' option:
#
# $ xconsole -file /dev/xconsole [...]
#
# NOTE: adjust the list below, or you'll go crazy if you have a reasonably
# busy site..
#
daemon.*;mail.*;\
news.err;\
*.=debug;*.=info;\
*.=notice;*.=warn |/dev/xconsole
drwxrwxr-x 10 root fuse 4.0K Sep 7 04:12 .
drwxr-xr-x 12 root root 4.0K Jul 22 2014 ..
-rw-r--r-- 1 root root 0 Jul 1 04:16 alternatives.log
-rw-r--r-- 1 root root 4.1K Jun 8 23:25 alternatives.log.1
-rw-r--r-- 1 root root 363 Jun 7 22:16 alternatives.log.2.gz
-rw-r--r-- 1 root root 2.8K Aug 18 2014 alternatives.log.3.gz
drwxr-xr-x 2 root root 4.0K Jul 1 04:16 apt
-rw-r--r-- 1 root root 3.8K Sep 7 04:11 boot.log
-rw-r--r-- 1 root root 0 Jun 24 2014 bootstrap.log
-rw-rw---- 1 root utmp 0 Sep 1 04:16 btmp
-rw-rw---- 1 root utmp 768 Aug 16 20:41 btmp.1
drwxr-xr-x 2 root root 4.0K Sep 1 04:16 ConsoleKit
drwxr-xr-x 2 root root 4.0K Sep 7 04:15 cups
-rw-r----- 1 root adm 33K Sep 7 04:12 dmesg
-rw-r----- 1 root adm 31K Sep 7 04:11 dmesg.0
-rw-r----- 1 root adm 11K Sep 6 04:13 dmesg.1.gz
-rw-r----- 1 root adm 9.6K Sep 6 04:11 dmesg.2.gz
-rw-r----- 1 root adm 11K Sep 5 04:13 dmesg.3.gz
-rw-r----- 1 root adm 9.6K Sep 5 04:11 dmesg.4.gz
-rw-r--r-- 1 root root 0 Jul 1 04:16 dpkg.log
-rw-r--r-- 1 root root 16K Jun 8 23:25 dpkg.log.1
-rw-r--r-- 1 root root 2.1K Jun 7 23:14 dpkg.log.2.gz
-rw-r--r-- 1 root root 60K Aug 18 2014 dpkg.log.3.gz
-rw-r--r-- 1 root root 24K Jul 22 2014 faillog
-rw-r--r-- 1 root root 3.0K Jul 22 2014 fontconfig.log
drwxr-xr-x 2 root root 4.0K Jun 24 2014 fsck
drwxr-xr-x 3 root root 4.0K Jul 22 2014 hp
-rw-rw-r-- 1 root utmp 286K Sep 7 14:40 lastlog
drwxr-xr-x 2 root root 4.0K Sep 7 04:11 lightdm
drwxr-xr-x 3 root root 4.0K Sep 4 04:16 samba
-rw-r--r-- 1 root root 153K Sep 7 04:11 udev
drwxr-xr-x 2 root root 12K Sep 7 04:15 upstart
-rw-rw-r-- 1 root utmp 48K Sep 7 14:40 wtmp
-rw-rw-r-- 1 root utmp 262K Sep 1 04:12 wtmp.1
-rw-r--r-- 1 root root 11K Sep 7 04:11 Xorg.0.log
-rw-r--r-- 1 root root 11K Sep 7 04:10 Xorg.0.log.old
rsyslog start/running, process 5349
Answer the question
In order to leave comments, you need to log in
Didn't find what you were looking for?
Ask your questionAsk a Question
731 491 924 answers to any question