Just switched from Ubuntu 10.04 to 12.10 and loving it. Some problems are that in 12.10 some logging is off by default. Most importantly, I've been unable to figure out why /var/log/auth.log is empty. I've tried editing /etc/rsyslog.d/50-default.conf (and restarting) but to no avail.
Solved? I found this info related to Ubuntu 10.04: https://gist.github.com/909386 After tweaking my conf, thing are slowly starting to work. Had to change the ownership .... strange!