I've set up fail2ban on a centos VPS used for a few mail accounts among other things and want to check that everything is running smoothly. According to
fail2ban-client status everything is running as expected on dovecot, exim, and ssh, but there's no log file in the expected place (
find / -name fail2ban.log finds nothing.
fail2ban-client get loglevel returns
Current logging level is 'INFO', and
fail2ban-client get logtarget returns
Current logging target is:- SYSLOG. Based on this, it should be logging in the default location, which all the docs and guides I've found say is
/var/log/fail2ban.log, but no log file is there.
There have been many of the usual probes on dovecot since setting fail2ban up including many from repeat IPs, so it's not like fail2ban has had nothing to do.
How can I investigate why fail2ban has not got any log file and appears to be failing to log? Searches uncovered a few people posting about similar problems on a few forums but no solutions I could see.