Specific Options The following files, or symbolic links to files, must be in /var/log, if the corresponding subsystem is installed: File Description lastlog record of last login of each user messages system messages from syslogd wtmp record of all logins and logouts