log management
What is log management?
Log management is the collective processes and policies used to administer and facilitate the generation, transmission, analysis, storage, archiving and ultimate disposal of large volumes of log data created within an information system.
A log, in a computing context, is the automatically produced and timestamped documentation of events relevant to a particular system. Virtually all software applications and systems produce log files.
Effective log management is essential to both security and compliance. Monitoring, documenting and analyzing system events is a crucial component of security intelligence. In regard to compliance, regulations such as the Health Insurance Portability and Accountability Act, the Gramm-Leach-Bliley Act and the Sarbanes-Oxley Act have specific mandates relating to audit logs.
Log management software automates many of the processes involved. An event log manager, for example, tracks changes in an organization's IT infrastructure. These changes are reflected in audit trails that must be produced for a compliance audit.
