DataTerminology.comNEW
A log where entries cannot be altered or deleted after being recorded, providing tamper evidence and durable history.
DESCRIPTION
Immutable logs ensure recorded events remain unchangeable, supporting forensics and regulatory compliance. Techniques include append-only storage, cryptographic hashes, and chain-linking entries. WORM-capable storage and object-locking enforce immutability at the platform level. External timestamping and digital signatures strengthen integrity proofs. Many systems use Merkle trees or blockchain-inspired structures for efficient verification. Retention and legal hold policies complement immutability. Access to append operations must be controlled to prevent unauthorized writes.
ALTERNATIVE DEFINITIONS
Wikipedia
Write once read many (WORM) describes a data storage device in which information, once written, cannot be modified.
Describes the storage property that underpins immutable logs.
Hyperledger Fabric
The ledger is an append-only log of transactions that is immutable.
Applies immutability to a distributed ledger transaction log.
RELATED TERMS
Append-Only Write Once Read Many Blockchain Merkle Tree Timestamping Non-repudiation Audit Logging Tamper Evidence Chain of Custody Digital Signature
COMPETING TERMS
Mutable Log
RELATIONS
- Narrower: Append-Only Append-Only Log
KNOWLEDGE AREAS
Data Security Observability & Telemetry Data Management Infrastructure
TARGET AUDIENCE
DevOps Engineer Data Engineer Data Steward Cloud Architect
EXTERNAL SOURCES
- Wikipedia - Write once read many
- AWS - S3 Object Lock (WORM) guide
- IETF - Timestamping protocol for integrity
- Elastic - Index lifecycle and retention
TOP QUESTIONS
Why use an Immutable Log?
It provides tamper-evident records essential for compliance, forensics, and non-repudiation. Immutable logs build trust in audit evidence.
Category: Relevancy
How do you implement an Immutable Log?
Use append-only storage with cryptographic hashing, time-stamping, and access control. Employ WORM-capable platforms and legal holds.
Category: How-To
Does immutability prevent all tampering?
It prevents modification but not malicious insertion. Strong authentication and monitoring are still required.
Category: Misunderstanding
What’s the performance impact of immutability?
Write patterns are append-optimized, but verification and retention policies can add overhead. Design for scalable ingestion and indexing.
Category: Opinion
How does blockchain relate to Immutable Logs?
Blockchains are distributed immutable logs secured by cryptographic linkage and consensus, extending immutability across participants.
Category: Example
What legal standards reference immutability?
Regulations and standards like SEC 17a-4(f), ISO 27001, and various national guidance require tamper-evident record keeping.
Category: Compliance
How can you prove log integrity later?
Store cryptographic hashes and external timestamps. Independently verify chain linkage and signatures during audits.
Category: Best practices
What is WORM storage’s role?
WORM enforces at the storage layer that written data cannot be altered, underpinning immutable log guarantees.
Category: Definition
How do you handle retention and deletion with immutability?
Define retention and legal hold windows. After expiration, delete entire immutable segments per policy.
Category: Management