The following pre-requisite must be met to ensure dependable and secure logging:
All computers must have their clock synchronized to a central timeserver to ensure
accurate time on events being logged.
If possible all logs should be centralized for easy analysis and also to help detect
patterns of abuse across servers.
Logging information traveling on the network must be encrypted if possible.
Log files are stored and protected on a machine that has a hardened shell.
Log files must not be modifiable without a trace or record of such modification.