From OSSEC Wiki

Log samples from Linux

• pam
• kernel
• sshd
• rshd
• su
• ftpd
• SELinux
• Useradd, userdel or user change messages
• Named
• Syslogd
• XFS filesystem
• Crontab
• Yum