There's no shortage of stuff that reaches you 80..90 days after the fact The UK voluntary retention rules make a lot more sense, compared to "a few days", which is entirely impractical
On Fri, Jan 6, 2012 at 9:30 AM, <valdis.kletni...@vt.edu> wrote: > > You need to track down a miscreant user *right now*? You got the last 48 hours > of logs right at hand. It's been a week? Meh, if somebody's been getting hit > by > a DDoS for a week and is just now calling you, the fact they have a DDoS is > the > least of their problems. Toss the logs. :) -- Suresh Ramasubramanian (ops.li...@gmail.com)
