The first thing you might want to do is check /var/log/auth.log. To do that, log into the server and issue the command: less /var/log/auth.log ...

Now monitoring auth.log for login failures, easy. What I'm having trouble wrapping my head around is how to monitor auth.log for successful logins, but from an unknown IP address, or with an ...

Log files on Linux systems contain a LOT of information — more than you'll ever have time to view. Here are some tips on how you can make use of it without ... drowning in it.

Linux system log files are by default set to rotate. Depending on the age or size, a sequence of files moves back a step, the oldest being removed and a new one taking over as the current log file ...