Which log files should be reviewed
 

Hello,

I normally don't go into the log files, but dived in looking for info on what I had installed in the past few days. There seem to be a lot of files in the /var/log folder, some already compressed. I likely need to review these, maybe even clean out, but where to start is the question.

For log files in general, is any experienced user willing to suggest which can be ignored, which should be reviewed, maybe even an opinion as to which are the most important to review. Size of the folder is 8 mb with about 280 files.

How long do I keep log files?

Thank for any suggestions that are offered.

mg92865

Typically most distributions have something like logrotate installed.

logrotate will automatically archive your old log files and delete them after a specified period of time. it pretty much automates the process of keeping your logs manageable.

I'd be surprised if this isn't already installed and running on your Ubuntu machine.

You should review /var/log/messages and /var/log/secure. Logrotate does rotate the logs for you so the size doesn't get out of control, but if you aren't reviewing your logs then logrotate is useless, actually its casing more problems then it fixes.

Besides viewing your logs you might want to look into installing an application such as logwatch this will email you important information about your system. It might be installed already if it is type

#> mail

from the command line and see if you have a bunch of email read these emails they are probably the logwatch reports.

Just noticed you were looking for the log for what you have installed..

/var/log/dpkg.log

dpkg is the Debian package manager, so this log should contain anything you have installed using dpkg, apt-get, aptitude, or synaptic

Thanks for the comments - problem solved
 

Thanks to all who contributed. I found the log showing which items had been installed, and corrected the problems that it created.

mg92865