[Unix]
secure.log
/etc/hosts.allow, /etc/hosts.deny
[vsftp]
/var/log/xferlog
/var/log/vsftpd.log
Well, I just read through the vsftpd.conf manpage .
If I wanted to enabled a lot of logging (and pare it down from there), I'd probably set:
dual_log_enable=YES log_ftp_protocol=YES xferlog_enable=YES syslog_enable=NO
I haven't tested this (and I don't have time at the moment to install vsftpd to do so).
After doing that, reload/restart the vsftpd service.
If logging is still not working correctly, you will need to check the ownership/permissions of your log file. Since you won't be using the syslogd facility, the /var/log/xferlog and /var/log/vsftpd.log files should be owned by the same user that vsftpd runs as.
If you don't know how to determine that, post the results of:
ps -ef | grep vsftpd
/etc/mtab