Which term refers to the collection of records that document events in a system for later review?

• A. Logs
• B. Audits
• C. Metrics
• D. Reports

Answer: (A)

Events in a system are recorded over time, creating a chronological trail of what happened. This collection of records is called logs. Logs capture details like timestamps, event types, sources, and messages, and they’re kept specifically for later review, troubleshooting, and security investigations. Audits are formal reviews to verify compliance or controls, not the ongoing record store itself. Metrics are summarized measurements of performance, not the detailed event records. Reports are formatted outputs derived from data, often after processing logs or metrics. So the term that best fits “the collection of records that document events in a system for later review” is logs.