[Yugong Series] Advanced Network Security Class 033 in May 2023. Emergency Response Traceability Analysis (Liunx Log Analysis)

---

foreword

Linux logs are files that record system operating information, including system startup and running status, application running status, system error and warning information, etc. This information can be used to diagnose system problems and understand system health. The log files generated by the Linux system are generally stored in the /var/log directory. Common log files include /var/log/messages, /var/log/syslog, etc.

The Linux system has a very flexible and powerful log function, which can save almost all operation records and retrieve the information we need from it.

This article introduces Linux system logs and log analysis techniques.

1. Liunx log analysis

1. Introduction to logs

Default log storage location: /var/log/

Check the log configuration: more /etc/rsyslog.conf

Several important logs:

登录失败记录࿱