Specific Options

The following files, or symbolic links to files, must be in /var/log, if the corresponding subsystem is installed:

File Description
lastlog record of last login of each user
messages system messages from syslogd
wtmp record of all logins and logouts