QUESTION POSED ON: 11 April 2008 Is there any reason I should keep year-old snort log files? Only techs access the system and I need the space.
>
Is there a reason to keep year-old Snort logs? Well maybe. Most log retention decisions are based on one of the following factors:
policy
regulation
audit
capacity
If your organization has a log retention policy, then the duration of retention should be documented. If your organization comes under the auspices of some regulatory body or document - Sarbanes-Oxley, for example - then this may mandate a retention period for certain types of transactions. If the log data isn't covered by either of these and you don't need it for any other purpose - like later investigation or audit - then I see no reason why it cannot be deleted.
Search and Browse the Expert Answer Center Search and browse more than 25,000 question and
answer pairs from more than 250 TechTarget industry experts.
TechTarget provides technology professionals with the information they need to perform their jobs - from developing strategy, to making cost-effective purchase decisions and managing their organizations' technology projects - with its network of technology-specific websites, events and online magazines.