In CentOS 7, how can I locate and view all the system logs that tell me who tried to enter the system, who got in, what processes they contacted, what they accomplished, etc. I want to be able to link every activity to either a userid or a remote IP address.
var/log/ directory contains numerous resources including
/var/log/secure, but most of the files are of type
Binary (application/octet-stream) and the OS does not know how to open them unless I associate some unknown viewing program with them. Also,
var/log/firewalld does not seem to contain useful information.
I can find all the logs produced by my app, my database, and NginX/Apache.