logging
Installation
SKILL.md
Logging for External Data Source Access
Security Requirement
If the data contained and served by external data sources is sensitive, accesses to them MUST be logged. The product SHOULD have the functionality to send these events to an external logging facility using industry standards.
What to Log
| Event | Details to Capture |
|---|---|
| Data access | Who accessed what data, when, from where |
| Data modification | Who modified what data, what changed |
| Access denial | Failed access attempts (authentication or authorization failures) |
| Bulk operations | Large data exports or queries |
| Connection events | Connection establishment and teardown |
| Schema changes | Structural changes to data sources |