To avoid the altering of log/audit files in case of a break-in and to comply with PCI DSS requirement 10.5.3, you must use a separate centralized log server for CloudBlue Commerce.
CloudBlue Commerce supports integration with a centralized log server using the industry standard syslog protocol. On the server side you can use any syslog compatible server. We recommend rsyslogd for Linux.
For a detailed procedure of setting up centralized logging for Linux, please follow Configuring Logging.