how to setup security event logging linux

[pontifor]

Hi this is a setup question for compliance monitoring.

I have a linux box, so I index everything under /var/log. I need to build reports that

• report each account login/logout
• success or failure of login
• activities performed
• software installed/uninstalled

Any hints on how to processed? I think this is basic compliance reporting, maybe there are some examples somwhere?

thanks!
Stefan

[MarioM · Accepted solution]

the Splunk for *nix app has most of what you looking for