Include appropriate values in logs Administrative audit logs should contain a timestamp, username, source IP address... Read more about Include appropriate values in logs