Information
All changes made to /etc/syslog.conf must be documented. When making modifications to the existing IT system, at first everything should be logged. After that, individual areas can be deactivated in stages as required. The /var partition must be sufficiently large to accommodate the log files.
* Please note that the equivalent file on a Red Hat system is /etc/rsyslog.conf
Safeguard Catalogues: S 4: Hardware and software
S 4.106: Activation of system logging