Which of the following is inappropriate for continuous logging?
-
Critical transactions
-
Account Lockout
-
Page load times for all application pages
-
Login/Logout events for users
Logging page load times for all application pages is inappropriate for continuous logging because it generates excessive volume of low-value data, degrades performance, and makes it difficult to find meaningful security events. Continuous logging should focus on security-relevant events like logins, lockouts, and critical transactions.
Continuous/security logging is meant to capture security-relevant events like authentication, lockouts, and critical transactions so they can be audited or investigated. Page load times are a performance metric, not a security event, so logging them continuously belongs to application performance monitoring rather than the security logging stream.