2 docs tagged with "ECS"

Practices to guarantee structured logging, secure transport and centralisation of operational events.

Organisational policy that defines the requirements for the production, formatting, centralisation, retention and protection of application and security logs, including a minimum event schema, mandatory events, masking of sensitive data, immutability and SIEM integration, proportional to the criticality level (L1, L2, L3).