# grep -ri "syslog" /var/log/
/var/log/syslog.1:Dec 31 06:11:00 red rsyslogd: [origin software="rsyslogd" swVersion="5.8.6" x-pid="515" x-info="http://www.rsyslog.com"] start
/var/log/syslog.1:Dec 31 06:11:00 red rsyslogd: rsyslogd's groupid changed to 103
/var/log/syslog.1:Dec 31 06:11:00 red rsyslogd: rsyslogd's userid changed to 101
/var/log/syslog.1:Dec 31 06:11:00 red rsyslogd-2039: Could not open output pipe '/dev/xconsole' [try http://www.rsyslog.com/e/2039 ]
/var/log/syslog.1:Dec 31 19:22:59 red rsyslogd: [origin software="rsyslogd" swVersion="5.8.6" x-pid="515" x-info="http://www.rsyslog.com"] exiting on signal 15.
/var/log/auth.log.1:Dec 31 23:40:47 red sshd[657]: syslogin_perform_logout: logout() returned an error
/var/log/auth.log.1:Jan  6 04:12:31 red sshd[20927]: syslogin_perform_logout: logout() returned an error
/var/log/auth.log:Jan  7 11:21:33 red sshd[2341]: syslogin_perform_logout: logout() returned an error
/var/log/auth.log:Jan  8 06:53:13 red sshd[14849]: syslogin_perform_logout: logout() returned an error