All servers should be configured to send relevant logs to a centralized syslog server.
alt
click/enter