The service can be configured to ingest logs from custom applications running in the cloud environment through a collection agent or an ingestion API.
Application Log Ingestion
CCC.Logging.CP02
Related Threats
| ID | Title | Description |
|---|---|---|
| CCC.Logging.TH06 | Forged or Malformed Entries are Written to Logs | User-supplied data containing line breaks, control characters, or escape sequences may be written to logs without proper encoding or sanitization. Injected content can forge additional log records, split or truncate genuine entries, or disrupt downstream parsers, so the stored audit trail no longer reflects what occurred, reducing the integrity of log data. |
| CCC.Logging.TH07 | Security-relevant Events are Not Logged | Security-critical actions may not be logged because log capture is not enabled for a source, verbosity is set too low, or a filter or transformation rule discards the relevant entries at ingestion. The events are absent from the log store, so threats go undetected and post-incident analysis lacks evidence, reducing the integrity and availability of the audit trail. |