linux-log-management
Installation
SKILL.md
Log Management
Distro support
journalctl and the systemd journal are identical on both families. The
differences are the legacy /var/log/* text-file names and the package
manager. The body uses Debian/Ubuntu paths; the RHEL family (Fedora, RHEL,
CentOS Stream, Rocky, Alma, Oracle) equivalents are in the matrix.
| Log / concept | Debian/Ubuntu | RHEL family |
|---|---|---|
| System log (legacy) | /var/log/syslog |
/var/log/messages |
| Auth / sudo / SSH | /var/log/auth.log |
/var/log/secure |
/var/log/mail.log |
/var/log/maillog |
|
| Web (Apache) | /var/log/apache2/ |
/var/log/httpd/ |
| Cron | /var/log/syslog (CRON tag) |
/var/log/cron |
| systemd journal | journalctl … |
identical |
| logrotate configs | /etc/logrotate.d/ |
same |
| Package install | apt install <pkg> |
dnf install <pkg> |