#Key log files

##App Server

AppArmor and grsec errors

`/var/log/kern.log`

Apache

`/var/log/apache2/*`

If an event triggers it the securedrop application log

`/var/www/securedrop/securedrop.log`

##Monitor Server

OSSEC

```
/var/ossec/log/ossec.log
/var/ossec/log/alerts/alerts.log
```

Postfix/Procmail

```
/var/log/mail.log
/var/log/procmail.log
```

# Log files cheat sheet

## Both servers

AppArmor and grsec errors

`/var/log/kern.log`

iptables

`/var/log/syslog`


## App Server

Apache

`/var/log/apache2/*`

If an event triggers it the securedrop application log

`/var/www/securedrop/securedrop.log`

## Monitor Server

OSSEC

```
/var/ossec/log/ossec.log
/var/ossec/log/alerts/alerts.log
```

Postfix/Procmail

```
/var/log/mail.log
/var/log/procmail.log
```

Add log file for iptables to cheat sheet
Add log file for iptables to cheat sheet
