Logs are the memory of IT operations. They record what systems did, who did it and when, which supports troubleshooting, performance analysis, security monitoring, investigations and audit. Logs only help if the right events are captured, kept long enough, protected from alteration and actually reviewed. IT service level management, the second half of this topic, is about agreeing what level of service IT will provide and proving whether it was delivered, and that proof usually comes from logs and monitoring data. The two topics meet in one question the auditor keeps asking: can the evidence be trusted?
Keep reading for free
Create a free StudyToCert account to read the rest of this lesson: 7 more sections, 7 key terms, a real-world example, an exam tip and self-check questions. Every lesson, lab and practice test is free with an account.