The service may be configured to aggregate logs from resources in multiple accounts or projects into a single central logging destination.
Centralised Log Collection
CCC.Logging.CP04
Related Threats
| ID | Title | Description |
|---|---|---|
| CCC.Logging.TH01 | Log Entries are Delayed or Dropped During Ingestion | Log volume bursts, ingestion quota throttling, network bottlenecks, slow transformation rules, or custom-format entries that fail to parse may delay the ingestion pipeline or overflow agent and sink buffers. Log entries arrive late or are dropped, so log-based metrics under-count, detections fire after the fact and the audit trail has gaps, reducing the availability and integrity of log data. |