syslog events to identify particular issue
 

Hi

I would like know how to read logs in linux.
I know about syslog and /var/log/* log files but I don't know what kind of events means particular problem.
E.g.
- hardware issues (?)
- security problem (/var/log/security)
- administrative changes (?)

QUESTIONS :
------------
What kind of entries I would find and where if there were hardware issues with :
- hard disk,
- dvd burner,
- some peripherals ?

What kind of entries I would find and where if there were administrative changes :
- change owner of some file
- add new user/group


thx for help.

Bit of an open qn, but here are a few hints

HW issue on boot: /var/log/dmesg
HW issue during normal running : /var/log/messages

change of ownerships: not normally logged; ditto new user.
you can get tools and/or add wrappers to log this if you want.

TBH, actual err msgs and give distro they appear on are easier to explain. Also, some distros have other log files elsewhere.

HTH