Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

Up until few days ago, my Ubuntu 10.04 worked like a clock.

Then I switched to Ubuntu 12.10 and things don't work the same way with this setup. First, the new system wasn't logging any mail activity, so I had to edit /etc/rsyslog.d/50-default.conf and now the mail logs okay.

I am still not happy because the file /var/log/auth.log is empty and I can't find any information how to enable PAM activity logging.

I must add that even my /var/log/syslog is also empty!

I wonder what other logs are switched off be default. I am sure some folks with Ubuntu 12.10 went through the same ordeal.

share|improve this question
You've edited your question. Does that mean, that your syslog isn't empty anymore (if it is still empty, what does dmesg show?) What is your specific question? – wullxz Jan 22 '13 at 0:53
My question is: How do I enable the PAM log (/var/log/auth.log)? What other logs in Ubuntu are disabled by default? Obviously, I can't use a server that doesn't log failed logins. – bearcat Jan 22 '13 at 1:04
Add that to your question. I can't help you, but a specific question will more likely be answered. – wullxz Jan 22 '13 at 1:06
up vote 0 down vote accepted

I found this info related to Ubuntu 10.04:

Default rsyslog configuration for Ubuntu 10.04

After tweaking my conf, thing are slowly starting to work.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.