Skip to main content

Logs and Audit

Logs and Audit

Field Value
Distribution WCT English — OpenC5ISR
Product OpenC5ISR
Release 0.15.1
Deployment openc5isr-en.wallacecorptech.com
Source /srv/wct/releases/OpenC5ISR-v0.15.0
Evidence Operational logging standard
Source fingerprint 63d2b1097707e25d666401cdc6362e395968600a40a08690210cd8c0b75fbf50
Status Generated baseline — human review required

Verification boundary: This page combines platform design guidance with static evidence from the release. It does not prove that every detected interface is enabled, reachable, secure, or operational in the deployed environment.

Log sources

Source Typical command/location Use
systemd/journald journalctl -u <unit> --since ... Process lifecycle, stdout/stderr and service errors.
Nginx /var/log/nginx/access.log, /var/log/nginx/error.log Routing, status, latency, upstream and TLS symptoms.
Application Structured logs or configured log directory Domain events, validation, dependency calls and workflow state.
Audit Protected append/central audit store Actor, action, target, policy decision, result and correlation.
Sensor/edge Device/agent logs and telemetry Connection, clock, calibration, sample loss and product generation.

Required structured fields

  • UTC timestamp plus source clock/host.
  • Severity, service/component, release version and instance.
  • Request/event/task/track/case correlation identifier.
  • Authenticated actor or service identity when applicable.
  • Outcome/error code and safe diagnostic context.

Do not log

  • Passwords, API token secrets, private keys, complete authorization headers or session cookies.
  • Sensitive content unless the approved audit/evidence policy explicitly requires and protects it.
  • Unbounded raw sensor/media streams in ordinary application logs.

Maintainer Notes

Add human-reviewed deployment notes, corrections, decisions, screenshots, and links here. Content outside the generated block is preserved on future runs.