Hi,
In which file I can see linux logs for logging, file creation & deletation, chenge permission, running servicese etc. I know it is difficult for individual identification.
So can you suggest some basic files which helpful for monitoring & also they include logging of basic service as i said above.
/var/log/* it will include all the logs but I want to go specific. Please share any reference link or pdf if have.
What you want is not logging but auditing.
System logs such as su log or messages provide rudimentary audit.
The stuff you would like to audit - files, services and applications needs additional configuration.
This is based on kernel module and is available on most distributions.
For instance, ARCH documentation
Audit framework - ArchWiki
A small disclaimer, i have not used those on linux systems in practice.
Regards
Peasant.