FM / log

/var/log

Name	Size	Mode	Actions
amazon/	-	0700	rm
apt/	-	0755	rm
chrony/	-	0750	rm
dist-upgrade/	-	0755	rm
journal/	-	2755	rm
landscape/	-	0755	rm
letsencrypt/	-	0700	rm
mysql/	-	0750	rm
nginx/	-	0755	rm
private/	-	0700	rm
sysstat/	-	0755	rm
unattended-upgrades/	-	0750	rm
alternatives.log	1109	0644	edit dl rm
alternatives.log.1	15837	0644	edit dl rm
alternatives.log.2.gz	800	0644	edit dl rm
alternatives.log.3.gz	1067	0644	edit dl rm
alternatives.log.4.gz	658	0644	edit dl rm
alternatives.log.5.gz	1136	0644	edit dl rm
apport.log	0	0640	edit dl rm
auth.log	655053	0640	edit dl rm
auth.log.1	1236599	0640	edit dl rm
auth.log.2.gz	87534	0640	edit dl rm
auth.log.3.gz	124334	0640	edit dl rm
auth.log.4.gz	105071	0640	edit dl rm
btmp	1144320	0660	edit dl rm
btmp.1	2066688	0660	edit dl rm
cloud-init-output.log	7061	0640	edit dl rm
cloud-init.log	240079	0640	edit dl rm
dmesg	49268	0640	edit dl rm
dmesg.0	93187	0640	edit dl rm
dmesg.1.gz	13856	0640	edit dl rm
dpkg.log	57943	0644	edit dl rm
dpkg.log.1	69427	0644	edit dl rm
dpkg.log.2.gz	6109	0644	edit dl rm
dpkg.log.3.gz	5845	0644	edit dl rm
dpkg.log.4.gz	3066	0644	edit dl rm
dpkg.log.5.gz	12732	0644	edit dl rm
kern.log	2336	0640	edit dl rm
kern.log.1	259	0640	edit dl rm
kern.log.2.gz	309	0640	edit dl rm
kern.log.3.gz	13377	0640	edit dl rm
kern.log.4.gz	445	0640	edit dl rm
lastlog	292292	0664	edit dl rm
php7.4-fpm.log	7424383	0600	edit dl rm
php7.4-fpm.log.1	17015757	0600	edit dl rm
php7.4-fpm.log.2.gz	237827	0600	edit dl rm
php7.4-fpm.log.3.gz	184253	0600	edit dl rm
php7.4-fpm.log.4.gz	173228	0600	edit dl rm
php7.4-fpm.log.5.gz	193770	0600	edit dl rm
php7.4-fpm.log.6.gz	250581	0600	edit dl rm
php7.4-fpm.log.7.gz	142980	0600	edit dl rm
php7.4-fpm.log.8.gz	131083	0600	edit dl rm
php7.4-fpm.log.9.gz	157668	0600	edit dl rm
php7.4-fpm.log.10.gz	242354	0600	edit dl rm
php7.4-fpm.log.11.gz	94454	0600	edit dl rm
php7.4-fpm.log.12.gz	75564	0600	edit dl rm
README	1041	0644	edit dl rm
syslog	1422024	0640	edit dl rm
syslog.1	1972426	0640	edit dl rm
syslog.2.gz	163804	0640	edit dl rm
syslog.3.gz	188621	0640	edit dl rm
syslog.4.gz	166258	0640	edit dl rm
ubuntu-advantage-apt-hook.log	0	0644	edit dl rm
wtmp	8448	0664	edit dl rm

Edit: /var/log/wtmp (8448B)

~~~reboot6.17.0-1007-awsD�il�5~~~runlevel6.17.0-1007-awsS�i�tty1tty1�T�i�d "ttyS0tyS0"T�i�d �tty1tty1LOGIN�T�i�d "ttyS0tyS0LOGIN"T�i�d �pts/0ts/0ubuntu13.233.177.5j�iAo ��pts/0p�iϡNpts/0ts/0ubuntu2.50.143.77��i�'2�MNpts/0�+�i�tY�pts/0ts/0ubuntu185.22.211.98�T�i :��bY�pts/0�T�i�� pts/0ts/0ubuntu185.22.211.98��i�~��b��pts/0��i�w~~~reboot7.0.0-1010-aws�H�j��5~~~runlevel7.0.0-1010-aws�H�jjN�ttyS0tyS0��H�j�7�tty1tty1��H�j.>�tty1tty1LOGIN��H�j.>�ttyS0tyS0LOGIN��H�j�7