It seems to be standard industry practice to anonymise IP addresses etc. in web server log files after seven days. If this has happened, how long am I allowed to keep the log files? My reason for keeping them is for possible analysis in the event of an attack that is only noticed and/or processed after seven days (this has already happened to me). I sleep more peacefully when I don't have to delete log files at all, although I already realise that this is not an argument. I expect a statement of the form one month, one year, three years or forever (archived).
Webmasters Stack Exchange is a question and answer site for webmasters. It only takes a minute to sign up.
Sign up to join this community
Anybody can ask a question
Anybody can answer
The best answers are voted up and rise to the top
