[root@AvidLearn ~]# dnf -y install rsyslog

[root@AvidLearn ~]# systemctl start rsyslog

[root@AvidLearn ~]# systemctl status rsyslog

● rsyslog.service - System Logging Service

   Loaded: loaded (/usr/lib/systemd/system/rsyslog.service; enabled; vendor preset: enabled)

   Active: active (running) since Mon 2022-03-07 07:46:55 +0330; 14s ago

[root@AvidLearn ~]# cat /etc/rsyslog.conf | grep -v "#" | grep -v ^$

global(workDirectory="/var/lib/rsyslog")

module(load="builtin:omfile" Template="RSYSLOG_TraditionalFileFormat")

include(file="/etc/rsyslog.d/*.conf" mode="optional")

*.info;mail.none;authpriv.none;cron.none                /var/log/messages

authpriv.*                                              /var/log/secure

mail.*                                                  -/var/log/maillog

cron.*                                                  /var/log/cron

*.emerg                                                 :omusrmsg:*

uucp,news.crit                                          /var/log/spooler

local7.*                                                /var/log/boot.log

[root@AvidLearn ~]#

*.info;mail.none;authpriv.none;cron.none                /var/log/messages

authpriv.*                                              /var/log/secure

mail.*                                                  -/var/log/maillog

cron.*                                                  /var/log/cron

*.emerg                                                 :omusrmsg:*

[root@AvidLearn ~]# ls /var/log/messages

messages           messages-20220213  messages-20220220  messages-20220227  messages-20220306

[root@AvidLearn ~]# ll /var/log/messages*

-rw------- 1 root root  52029371 Mar  7 09:15 /var/log/messages

-rw------- 1 root root 211716719 Feb 13 03:47 /var/log/messages-20220213

-rw------- 1 root root 246900485 Feb 20 03:24 /var/log/messages-20220220

-rw------- 1 root root 218076815 Feb 27 03:09 /var/log/messages-20220227

-rw------- 1 root root 208170393 Mar  6 03:22 /var/log/messages-20220306

[root@AvidLearn ~]#

[root@AvidLearn ~]# cat /etc/logrotate.conf

# see "man logrotate" for details

# rotate log files weekly

weekly

​

# keep 4 weeks worth of backlogs

rotate 4

​

# create new (empty) log files after rotating old ones

create

​

# use date as a suffix of the rotated file

dateext

​

# uncomment this if you want your log files compressed

#compress

​

# RPM packages drop log rotation information into this directory

include /etc/logrotate.d

​

# system-specific logs may be also be configured here.

[root@AvidLearn ~]#

[root@AvidLearn ~]# tail -f /var/log/messages

Mar  7 13:10:37 AvidLearn systemd[26625]: Reached target Timers.

Mar  7 13:10:37 AvidLearn systemd[26625]: Reached target Paths.

Mar  7 13:10:37 AvidLearn systemd[26625]: Listening on D-Bus User Message Bus Socket.

Mar  7 13:10:37 AvidLearn systemd[26625]: Reached target Sockets.

Mar  7 13:10:37 AvidLearn systemd[26625]: Reached target Basic System.

Mar  7 13:10:37 AvidLearn systemd[26625]: Reached target Default.

Mar  7 13:10:37 AvidLearn systemd[26625]: Startup finished in 58ms.

Mar  7 13:10:37 AvidLearn systemd[1]: Started User Manager for UID 0.

Mar  7 13:10:38 AvidLearn systemd[1]: Started Session 9 of user root.

Mar  7 13:10:38 AvidLearn systemd-logind[720]: New session 9 of user root.

​

[root@AvidLearn ~]# tail -f /var/log/secure

Mar  7 07:38:48 AvidLearn sshd[2278]: pam_unix(sshd:session): session opened for user root by (uid=0)

Mar  7 07:38:48 AvidLearn sshd[2282]: Accepted password for root from --.--.--.-- port 32874 ssh2

Mar  7 07:38:48 AvidLearn sshd[2282]: pam_unix(sshd:session): session opened for user root by (uid=0)

Mar  7 11:57:54 AvidLearn sshd[2278]: pam_unix(sshd:session): session closed for user root

Mar  7 11:57:54 AvidLearn sshd[2282]: pam_unix(sshd:session): session closed for user root

Mar  7 13:10:37 AvidLearn sshd[26620]: Accepted password for root from --.--.--.-- port 1039 ssh2

Mar  7 13:10:37 AvidLearn systemd[26625]: pam_unix(systemd-user:session): session opened for user root by (uid=0)

Mar  7 13:10:37 AvidLearn sshd[26620]: pam_unix(sshd:session): session opened for user root by (uid=0)

Mar  7 13:10:38 AvidLearn sshd[26638]: Accepted password for root from --.--.--.-- port 1041 ssh2

Mar  7 13:10:38 AvidLearn sshd[26638]: pam_unix(sshd:session): session opened for user root by (uid=0)