Douglas Schweitzer's picture
Douglas Schweitzer

The Security Sector

Logs need attention, too!

In his recent CW article, Jian Zhen talks about ways to protect the integrity of log data. He’s right; recordkeeping and data retention are more critical than ever. But data retention requirements aside, log data is nearly equally important as it contains valuable information. Unfortunately, logs are sometimes difficult to decipher and are too often either neglected or simply overlooked. I’ve said it before and I’ll say it again: remember that valuable nuggets of information reside in your logs. If you take the time to learn log analysis, your firewall and IDS reports will fulfill their raison d’etre revealing much valuable data.