System log files are always located under the
/var/log directory. The following list presents an
overview of all system log files from SUSE Linux Enterprise Server present after a
default installation. Depending on your installation scope,
/var/log also contains log files from other services
and applications not listed here. Some files and directories described
placeholders and are only used, when the
corresponding application is installed. Most log files are only visible
for the user root.
Log of the advanced configuration and power interface event daemon (acpid), a daemon to notify user-space programs of ACPI events. acpid will log all of its activities, as well as the STDOUT and STDERR of any actions to syslog.
AppArmor log files. See Section IV,
Confining Privileges with AppArmor, (↑Security Guide) for details of AppArmor.
Logs from the audit framework. See
The Linux Audit Framework, (↑Security Guide) for details.
Log of the system init process—this file contains all boot messages from the Kernel, the boot scripts and the services started during the boot sequence.
Check this file to find out whether your hardware has been correctly initialized or all services have been started successfully.
Log of the system shutdown process - this file contains all messages issued on the last shutdown or reboot.
Logs of the ConsoleKit daemon (daemon for tracking what users are logged in and how they interact with the computer).
Access and error logs of the Common UNIX Printing System (cups).
Database file that contains all login failures. Use the faillog command to view. See man 8 faillog for more information.
Log files from the GNOME display manager.
Log files from the Kerberos network authentication system.
The lastlog file is a database which contains info on the last login of each user. Use the command lastlog to view. See man 8 lastlog for more information.
Log messages of some boot scripts, for example the log of the DHCP client.
Mail server (postfix, sendmail) logs.
This is the default place where all Kernel and system log messages go and should be the first place (along with /var/log/warn) to look at in case of problems.
NetworkManager log files
Log messages from a news server.
Logs from the Network Time Protocol daemon (ntpd).
PackageKit (with libzypp backend) log files.
Log files from the data center automation tool puppet.
Log files from samba, the Windows SMB/CIFS file server.
Logs from SaX2, the SUSE advanced X11 configuration tool.
Logs from the system configuration profile management (scpm).
Log of all system warnings and errors. This should be the first place (along with /var/log/messages) to look at in case of problems.
Database of all login/logout activities, runlevel changes and remote connections. Use the command last to view. See man 1 last for more information.
Log files from the extended Internet services daemon (xinetd).
X startup log file. Refer to this in case you have problems starting X. Copies from previous X starts are numbered Xorg.?.log.
All YaST log files.
libzypp log files. Refer to these files for the package installation history.
Logs from the command line installer zypper.