What you think are some of the difficulties in putting together a good logging and monitoring program since this goes far beyond just collecting and storing the logs somewhere.

Security logging and monitoring is critical in ensuring you have good visibility into your network and is one of the fundamental steps in protecting the organization, yet many companies do a poor job of getting this function under control.
Discuss:
What you think are some of the difficulties in putting together a good logging and monitoring program since this goes far beyond just collecting and storing the logs somewhere.
What are valuable sources of logs during a security incident and how might these logs help resolve an operational or security issue?

Last Completed Projects