A log record is a single entry in a system, application, or security log that captures an activity or event. It usually includes a timestamp, the component that generated it, the action taken, and related metadata such as a username, IP address, device ID, or mailbox name. Log records help reconstruct what happened on a machine or network without relying on memory or guesswork.
In cyber security, log records are essential for detection, auditing, and incident response. Defenders use them to spot failed logins, unusual admin actions, data access, or signs of lateral movement. Attackers may try to delete, alter, or flood logs to hide traces of compromise, which is why protected logging, central collection, and retention controls matter. Log records can also expose personal or sensitive information, so access should be limited and retention should be justified.