General Log Locations

C:\
   |
   +-- Windows\
               |
               +-- System32\
                            |
                            +-- winevt\
                                       |
                                       +-- Logs\
                                                |
                                                +-- Security.evtx
                                                +-- Application.evtx
                                                +-- System.evtx
                                                +-- Windows Powershell.evtx
                                                +-- Microsoft-Windows-PowerShell%4Operational.evtx
                                                +-- Microsoft-Windows-Sysmon%4Operational.evtx

/
 |
 +-- var/
         |
         +-- log/
         |       |
         |       +-- messages
         |       +-- syslog
         |       +-- kern.log
         |       +-- cron
         |       +-- dmesg
         |       +-- boot.log
         |       +-- maillog
         |       +-- mail.log
         |       +-- user.log
         |       +-- cups
         |       +-- daemon.log
         |       +-- anaconda.log
         |       +-- auth.log
         |       +-- secure
         |       +-- sulog
         |       +-- dpkg.log
         |       +-- yum.log
         |       +-- wtmp (binary file)
         |       +-- btmp (binary file)
         |       +-- faillog (binary file)
         |       +-- lastlog (binary file)
         |       +-- apt/
         |       |       |
         |       |       +-- history.log
         |       |       +-- term.log
         |       |
         |       +-- audit/
         |                 |
         |                 +--audit.log
         |
         +-- audit/ (binary files)
         |
         +-- adm/ 
         |       | 
         |       +-- messages
         |       +-- secure
         |       +-- wtmpx
         |       +-- sulog
         |
         +-- run/
                 |
                 +-- utmp (binary file)