Log management is an part of any server administrator’s responsibility and is an part of security solutions.
By monitoring log files, you can gain detailed insight on server security. If you want to take a proactive approach to server management, regular log file analysis is required.
Logs are main evidence of an attack, therefore it is so important not just collect logs, but analyse them and detect anomalies.
There you can find some tips on critical logs that you need for incident investigation and response.
Penetration testing for your web application