Users "logging in" log file
Could someone tell me if there is a file that REDHAT stores log in information in. I was looking for a log that would record each time someone logged in or out and what time,data,etc that event occured on.
Also, what should I be looking for in other files if I suspect someone is messing around? What are the key log files to watch and what would I be looking for?
Is there a log file that records where a user logs in from? Like what IP address for instance?
Is there a log file that monitors IP connections? This would be like a connection from another computer but not neccesarily a user logging into a shell. For example, if my computer was pinged or samba was accessed, etc.