5.00503 Rationale I like to go through my system logs. This often lets me know if there's a system problem before it becomes a major issue, and it shows me security issues.
Logs contain a lot of repetition, which drowns out the interesting entries.
One needs to remember to review them. One needs to be root to looks at logs for some OSs. On most systems, looking at the logs for just one day can be a pain. If I attack each box I deal with and write a separate script to do all this, I'll waste a lot of time duplicating effort. It strips out the date and PID, and throws away certain entries.