The difficult art of managing logs

Another very important use of logs, the one we are interested in here, is to record who has used the system and for doing what. We can call these Audit Logs but what distinguish them from the normal logs is most often the information we want to extract from them and not their form or content. It is true that there are specialized Audit Logs generated for example by some operating systems or some particular applications, but today these are more exceptions than rules.