Skip to main content

Management / Logging

Capabilities

Version:
IDTitleDescriptionThreat Mappings
CCC.Logging.CP01Service Log CaptureThe service can be configured to collect logs emitted by other cloud services at the level of verbosity selected for each source.2
CCC.Logging.CP02Application Log IngestionThe service can be configured to ingest logs from custom applications running in the cloud environment through a collection agent or an ingestion API.2
CCC.Logging.CP03Real-Time Log IngestionThe service automatically makes ingested log entries available for search and alerting in near real time, so that detection and response are not delayed.1
CCC.Logging.CP04Centralised Log CollectionThe service may be configured to aggregate logs from resources in multiple accounts or projects into a single central logging destination.1
CCC.Logging.CP05Custom Log Format SupportThe service can be configured to ingest custom log formats, including logs from on-premises systems or other cloud environments, through its collection agents.1
CCC.Logging.CP06Log Filtering and TransformationThe service may be configured to filter, normalise, and transform raw log data at ingestion to reduce storage volume and improve usability.3
CCC.Logging.CP09Internal SinkThe service may be configured to continuously route log data to a storage bucket, data warehouse, or messaging child resource within the same cloud provider.1
CCC.Logging.CP10External SinkThe service may be configured to route log events to an external SIEM or data analysis system outside the cloud platform.1
CCC.Logging.CP11Log-based MetricsThe service may be configured to derive numeric metrics from log entries that match a query or filter, for performance monitoring and alerting.1
CCC.Logging.CP14Sensitive Data MaskingThe service may be configured to detect sensitive data such as personal information, credentials, or tokens in log entries at ingestion and mask or redact it before storage. Not every provider offers this natively (GCP Cloud Logging has no ingestion-time masking).1

Imports

IDRemarks
CCC.Core.CP01Encryption in Transit Enabled by Default
CCC.Core.CP02Encryption at Rest Enabled by Default
CCC.Core.CP03Access Log Publication
CCC.Core.CP06Access Control
CCC.Core.CP07Event Publication
CCC.Core.CP10Log Publication
CCC.Core.CP14API Access
CCC.Core.CP17Alerting
CCC.Core.CP20Resource Tagging
CCC.Core.CP22Location Lock-In
CCC.Core.CP32Deletion Protection
CCC.Core.CP33Public Access Restriction
CCC.Core.CP34Data Lifecycle Policy
CCC.Core.CP35Customer-Managed Encryption Keys