Security and Compliance Hardening

Secure LogScale for production and meet regulatory requirements

Workflow 1

Essential Security Setup

Step-by-step security configuration for production

Follow this guided journey to secure your LogScale deployment. In this path, you will:

  • Enable audit logging
  • Configure IP restrictions
  • Manage API tokens
  • Set data retention policies
  • Implement security policies
Start Here Workflow 2

Compliance and Auditing

Meet regulatory requirements with comprehensive audit logging

Configure LogScale to meet compliance requirements for SOC 2, HIPAA, GDPR, and other regulatory frameworks. In this path, you will learn about:

  • Audit logging configuration
  • Data immutability and retention
  • Compliance monitoring
  • Data encryption and security
Start Here Workflow 3

Advanced Access Control

Implement role-based access control and security policies

Master advanced security features for enterprise deployments. Configure granular access controls, API security, and session management. In this path, you will learn how to:

  • Configure role-based access control (RBAC)
  • Manage API tokens and security policies
  • Set up IP filtering and network restrictions
  • Configure session management
Get Started

Workflow 1: Essential Security Setup

Follow this guided journey to implement essential security controls for your LogScale production deployment. Each step builds on the previous one.

1

Enable Audit Logging

Set up comprehensive audit logging to track all administrative actions and data access

Audit Logging Overview

conceptintermediate

Introduction to audit logging and compliance requirements

Query Audit Logs

guideintermediate

Search and analyze audit log events
2

Configure IP Restrictions

Restrict access to LogScale based on IP addresses or CIDR ranges

IP Filters Overview

conceptintermediate

Introduction to IP filtering and network security
3

Manage API Tokens

Configure API tokens with appropriate permissions and security policies

API Tokens

apiintermediate

Overview of API token types, creation, and management
4

Set Data Retention Policies

Configure retention periods to meet compliance and storage requirements

Data Retention Overview

conceptintermediate

Introduction to retention policies and data lifecycle

Retention for Compliance

guideintermediate

Configure retention for compliance requirements
5

Implement Security Policies

Apply security policies to tokens, actions, and dashboards

Security Policies

guideintermediate

Configure IP restrictions and access controls for tokens, actions, and dashboards

Workflow 2: Compliance and Auditing

Configure LogScale to meet regulatory compliance requirements. Learn how to implement audit logging, data immutability, and compliance monitoring.

1

Understanding Compliance Requirements

Learn how LogScale supports SOC 2, HIPAA, GDPR, and other compliance frameworks

Security Overview

conceptintermediate

Overview of LogScale security features including data immutability and encryption
2

Configure, Monitor, and Analyze Audit Events

Configure, query, and monitor audit logs to track compliance and detect security issues, and generate reports and documentation for compliance audits

Query and Monitor Audit Logs

guideintermediate

Search audit logs and create dashboards for compliance monitoring

humio-audit Repository Schema

guideintermediate

Field reference for audit event types and data structure
3

Configure Retention for Compliance

Set retention policies to meet regulatory requirements for data preservation

Data Retention

guideintermediate

Configure time-based and size-based retention policies

Workflow 3: Advanced Access Control

Implement enterprise-grade access controls with role-based permissions, API security, and network restrictions.

1

Configure Role-Based Access Control (RBAC)

Set up roles and permissions to control access to repositories and features

Authorization and RBAC

guideintermediate

Configure roles, permissions, users, and groups for access control
2

Secure API Tokens

Implement token security policies and access controls

API Tokens

apiintermediate

Create and manage API tokens with security policies

Token Security Policies

guideintermediate

Apply IP restrictions and access controls to tokens
3

Configure IP Filtering

Restrict access based on IP addresses and network ranges

IP Filters

guideintermediate

Configure IP allowlists for organization and token access control
4

Configure Session Management

Control user session timeouts and authentication requirements

Session Management

guideintermediate

Configure session timeouts and manage active user sessions
5

Configure Identity Provider Integration

Integrate with SAML, OAuth, or LDAP for centralized authentication

Authentication

guideintermediate

Configure SAML, OAuth, OIDC, or LDAP authentication

SAML Configuration

guideintermediate

Configure SAML single sign-on

OAuth Integration

guideintermediate

Set up OAuth authentication with external providers

LDAP Integration

guideintermediate

Connect to LDAP directory services