It seems to be standard industry practice to anonymise IP addresses etc. in web server log files after seven days. If this has happened, how long am I allowed to keep the log files? My reason for keeping them is for possible analysis in the event of an attack that is only noticed and/or processed after seven days (this has already happened to me). I sleep more peacefully when I don't have to delete log files at all, although I already realise that this is not an argument. I expect a statement of the form one month, one year, three years or forever (archived).


Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge that you have read and understand our privacy policy and code of conduct.

Browse other questions tagged or ask your own question.