echo "local2.debug /var/log/sudo.log" >>/etc/rsyslog.conf echo "Defaults logfile=/var/log/sudo.log" >>/etc/sudoers

systemctl restart rsyslog