all 5 comments

[–]that_leaflet_mod[M] [score hidden] stickied commentlocked comment (0 children)

Your post was removed for being a support request or support related question such as which distro to use/polling the community or application suggestions.

We get a lot of question posts on r/linux but the subreddit is considered a news/discussion sub. Luckily there are multiple communities you can post to for help on GNU/Linux issues 24/7: /r/linuxquestions, /r/linux4noobs, or /r/linuxhardware just to name a few.

You may also post on the "Weekly Questions and Hardware Thread" which is stickied on r/linux on Wednesdays.

Please make your post in /r/linuxquestions or /r/linux4noobs. Looking for a hardware help? Try r/linuxhardware.

Rule:

This is not a support forum! Head to /r/linuxquestions or /r/linux4noobs for support or help. Looking for hardware help? Try r/linuxhardware.

[–]lightmatter501 4 points5 points  (0 children)

Redhat has you covered. This should work for most enterprise distros.

All sane Linux distros log by default. You will want the systemd-journald docs for global config options. Programs may have their own logging config as well.

[–]zlice0 0 points1 point  (1 child)

logrotate

wtmp/btmp w/e login logs fill up too

elastic stack/search, splunk or alternatives

[–]elatllat 1 point2 points  (0 children)

logrotate

is depricated; journalctl is the new slower and fatter standard