Retention of logs for purposes of audit is mandated by the LCG Audit Requirements document . Sufficient information should be retained to enable a complete trace from resource usage back to initial user authentication. This information can be useful for troubleshooting purposes and may also be needed in the investigation of security incidents as described in the Agreement on Incident Response document . Care should be taken to ensure that the logs gathered are securely archived and the integrity of these archives is guaranteed and access appropriately restricted. .
