There are two log files maintained for Red Hat Subscription Manager in the /var/log/rhsm directory:
rhsm.log shows every invocation and result of running Subscription Manager in either the user interface or the command line
rhsmcertd.log shows every time a new certificate is generated, which happens on a schedule defined by the cert
Frequency parameter in the rhsm.conf file. The rhsm.log file contains the sequence of every Python call for every operation invoked through the Subscription Manager tools. Each entry has this format:
YYYY-MM-DD HH:MM:SS,process_id [MESSAGE_TYPE] call python_script response
The response in the log entry can be very complex, spanning multiple lines, or relatively simply, with just a status code.
Because each log entry in rhsm.log relates to the Python script or function that was called, there can be multiple log entries for a single operation.