# Logs and Audit # Logs and Audit | Field | Value | | --- | --- | | Distribution | WCT English — OpenC5ISR | | Product | OpenC5ISR | | Release | 0.15.1 | | Deployment | `openc5isr-en.wallacecorptech.com` | | Source | `/srv/wct/releases/OpenC5ISR-v0.15.0` | | Evidence | Operational logging standard | | Source fingerprint | `63d2b1097707e25d666401cdc6362e395968600a40a08690210cd8c0b75fbf50` | | Status | Generated baseline — human review required | > **Verification boundary:** This page combines platform design guidance with static evidence from the release. It does not prove that every detected interface is enabled, reachable, secure, or operational in the deployed environment. ## Log sources | Source | Typical command/location | Use | | --- | --- | --- | | systemd/journald | `journalctl -u --since ...` | Process lifecycle, stdout/stderr and service errors. | | Nginx | `/var/log/nginx/access.log`, `/var/log/nginx/error.log` | Routing, status, latency, upstream and TLS symptoms. | | Application | Structured logs or configured log directory | Domain events, validation, dependency calls and workflow state. | | Audit | Protected append/central audit store | Actor, action, target, policy decision, result and correlation. | | Sensor/edge | Device/agent logs and telemetry | Connection, clock, calibration, sample loss and product generation. | ## Required structured fields - UTC timestamp plus source clock/host. - Severity, service/component, release version and instance. - Request/event/task/track/case correlation identifier. - Authenticated actor or service identity when applicable. - Outcome/error code and safe diagnostic context. ## Do not log - Passwords, API token secrets, private keys, complete authorization headers or session cookies. - Sensitive content unless the approved audit/evidence policy explicitly requires and protects it. - Unbounded raw sensor/media streams in ordinary application logs. --- ## Maintainer Notes Add human-reviewed deployment notes, corrections, decisions, screenshots, and links here. Content outside the generated block is preserved on future runs.