diff --git a/plugins/sys-opt/index.py b/plugins/sys-opt/index.py
index 831b8898f..a92f6cddc 100755
--- a/plugins/sys-opt/index.py
+++ b/plugins/sys-opt/index.py
@@ -110,6 +110,8 @@ def sysConf():
 def secRunLog():
     if os.path.exists('/var/log/auth.log'):
         return '/var/log/auth.log'
+    if os.path.exists('/var/log/messages'):
+        return '/var/log/messages'
     return '/var/log/secure'