At a customer we were asked to log/protocol all my administrative activity for potential audits etc
My admin-work is basically 98% ssh and maybe some additional tasks done via virt-manager (logging the work inside the VMs there is another topic ... I realize that right now).
Is there a recommended way to track the logs? Specific setup for syslog-ng or in my case journald?
Maybe I should setup remote syslog here?

