Where are unauthorized sudo attempts reported to?
When you attempt to use sudo, and are not allowed, a message says that the attempt will be reported.
Is this only reported in
/var/log/auth.log? Is there another place? The reason I ask, is because the log contains so much that it's not a very good way of viewing often.