Logs contain critical data related to what is happening to your systems and networks that is not readily obvious. Logs often contain evidence that your network and systems are being probed, long before intrusions actually occur. A single Windows server can easily generate over 5,000 log records a day across all categories. Log entries must be monitored to confirm appropriate log access. Log records must be of forensic value in an investigation, or to be admissible in court, there are more hoops to jump through to ensure log records cannot be deleted or altered.”]