Logs

ls -l /var/log
sudo tail -10 /var/log/auth.log
who /var/log/wtmp | tail -5
journalctl
journalctl -u <systemd-unit>