[Discuss] Linux audit tools?

[Scott Ehrlich]

What natively available tools do people recommend for, say, reviewing
the system log activity of a Fedora system?

I know aureport exists which is great for monitoring a variety of
activity, including people and successful login/logout attempts.   Is
there any similar summary took to reflect when external media may have
been entered to a system and activity performed, along with how long
said media was used in/with the system?

I have used Snare for Linux before, but I want the logs to remain on
the system, and I don't recall if Snare captures all relevant data
beyond just successful/failed login attempts, along with the
associated username.

It would be nice to monitor machine health, too, such as a possibly
failing/faulty hard/cd/floppy drive.

Thanks.

Scott