OWASP Logging Cheat Sheets

1. Purpose

   Operational and security use cases for logs.

2. Design and Implementation

   Event sources, where to record events and customizable logging.

3. Which Events to Log

   Authentication, authorization, input validation and system events.

4. Event Attributes

   When, where, who and what for each event.

5. Data to Exclude

   Secrets, PII and sensitive data that must not be logged.

6. Deployment and Operation

   Release, protection, monitoring and disposal of logs.

7. Attacks on Logs

   Log injection, confidentiality, integrity and availability threats.

8. Logging Vocabulary

   Standard event names for application logging.

9. Error Handling

   Safe error handling and avoiding information leakage.

Each section links to the official page. Titles and summaries by Extra Credit; the docs belong to their authors.