System Logs

File (/var/log/)	Description
auth.log	Authorization information
btmp	Failed login attempts
wtmp	Login records (active sessions)