I have a Ubuntu Server 11.10 installed. wanted to know where hardware related logs are stored & is there any configuration that needs to be done, for those logs to be activated?
If possible please mention where to find the logs related to drivers of the respective hardware failuer or something related to particular driver failure?
And in case if they are stored in one single log file then how to distinguish the hardware errors or logs from drivers errors or logs?
My purpose behind this information : I am just going to keep record of all those logs and audit those logs for ISO 27001 and then will send E-mails to respective Server Administrators for the errors that are found and errors that are occurring again and again. I am not looking for any particular hardware log here, but just would be auditing those logs and making sure that they are stored for 3 months on central storage server for future references. but still is there are any hardware related issues or errors that have occurred then would like to have then reviewed in the audit.
Update I am going to keep all the log files mentioned below for the audit but if any one of you think that I have to include some more log files for tracking hardware issues in the audit please suggest. :
/var/log/messages : General log messages
/var/log/boot : System boot log
/var/log/auth.log : User login and authentication logs
/var/log/daemon.log : Running services such as squid, ntpd and others log message to this file
/var/log/dpkg.log : All binary package log includes package installation and other information
/var/log/faillog : User failed login log file
/var/log/kern.log : Kernel log file
/var/log/mysql.* : MySQL server log file
/var/log/user.log : All userlevel logs
/var/log/fsck/* : fsck command log
/var/log/apport.log : Application crash report / log file
Updated Question TITLE
Thanks a log for the support till now and thanking you all for the same! :)
Warm Regards,
Rishee
/var/log/messages
contains also hardware related error messages from the kernel.