Linux/logging

Linux logs are save usually in  folder. Most linux distribution uses /syslog/, /syslog-ng/ or /rsyslog/ software for logging or sending them to remote servers. Analytics and visualisation software such a Elasticsearch and Kibana can be used for log inspection.

Usage by Distribution:
 * Debian/Ubuntu: /rsyslog/
 * RHEL/Fedora:

Standard logs:
 * Debian/Ubuntu:
 * RHEL/Fedora:

SSH sessions logging:
 * Debian/Ubuntu:
 * RHEL/Fedora:

Rsyslog
Rsyslogd supports queued operations to handle offline outputs. Official documentation: https://www.rsyslog.com/doc/v8-stable/configuration/index.html

Rsyslog Configuration
Default configuration files by Distribution:
 * Debian:  man rsyslog.conf: https://linux.die.net/man/5/rsyslog.conf
 * Ubuntu:

Docker
command show docker logs. See also https://stackoverflow.com/questions/30969435/where-is-the-docker-daemon-log/30970134#30970134 for further information about docker logs.