echo "local2.debug /var/log/sudo.log" >>/etc/rsyslog.confecho "Defaults logfile=/var/log/sudo.log" >>/etc/sudoerside
systemctl restart rsyslogdebug