Guide to Computer Security Log Management

The National Institute of Standards and Technology (NIST) developed this doocument in furtherance of its statutory responsibilities under the Federal Information security Management Act (FISMA) of 2002, Public Law 107-347. This publication seeks to assist organizations in understanding the need for sound computer security log management. It provides practical, real-world guidance on developing, implementing, and maintaining effective log management practices throughout an enterprise. The guidance in this publication covers several topics, including establishing log management infrastuctures, and developing and performing robust log management processes throughout an organization. The publication presents logging technologies from a high-level viewpoint, and it is not a step-by-step guide to implementing or using logging technologies.