Glossary: Security Operations and Incident Response

Device logs

Also written: device log

Records kept by network and security hardware such as firewalls, switches, routers and access points: rule hits, interfaces going up or down, configuration changes and admin sign-ins. They are usually sent to a collector by syslog.