Create log file:
touch /var/log/sudo.log
Edit the file /etc/sudoers
visudo
Paste
Defaults logfile="/var/log/sudo.log"
Restart rsyslog
sudo systemctl restart rsyslog
View log
tail -f /var/log/sudo.log
Checking Local Root Account Status Run sudo passwd -S root : Look for the status letter in the output. An L means the account is locked (...