probo/controls/operations/monitoring/OPS.MON.002_keep_your_logs.md

id, category, revision-version, revision-date, estimate-time, necessity, frameworks

id	category	revision-version	revision-date	estimate-time	necessity	frameworks
OPS.MON.002	operations/monitoring	1	2024-01-14	15m	mandatory	name sections soc2 CC7.3

Keep your logs

Purpose

Logs help you to detect and investigate security incidents and troubleshoot operational issues. They provide an audit trail.

Implementation

You should consider a retention period of at least 90 days, and up to 1 year.

• If you are using Grafana ⇒ Grafana Loki: Configure the retention period in loki-config.yaml.
• If you rely on GCP: In Cloud Logging, navigate to Logs Router and adjust log sink retention settings.

If you are using Datadog:

1. Go to Logs Management
2. Set the retention period (3 to 15 days depending on your plan).
3. As you are limited in time, also set up the configuration in GCP.

Evidence

• Screenshot of your configuration in GPC or Grafana