SECAI Core · phase 13 of 15 · noun
Log monitoring
The continuous collection, review, and analysis of system and application logs that record an AI model's inputs, outputs, and errors so that issues can be detected, investigated, and corrected
The Explain card
- Plain English
- Log monitoring is the continuous collection, review and analysis of system and application logs that record an AI model's inputs, outputs and errors, so problems can be detected, investigated and corrected.
- Example
- A team reviewing their chatbot's logs notices a growing number of responses containing internal URLs, and traces it to a retrieval source that was recently misconfigured to include an intranet index.
- Why it matters
- Logs are the flight recorder of an AI system. Without them you cannot investigate an incident, prove what the model said, or notice slow-burning abuse.
- Hook
- If it is not logged, it did not happen, and you cannot prove otherwise.
Word knowledge
How the word is built, where it came from, and what it sits beside in memory.
In a sentence
During deployment, log monitoring alerts the security team when a production chatbot generates repeated authentication errors after receiving malformed API requests.
Why these words
- log Middle English logge, a bulky piece of wood acts attributively to identify the records being monitored
- monitoring English monitor plus -ing, ultimately from Latin monitor, one who warns names the ongoing activity in the phrase
Where it came from
- Origin
- an English compound formed from log and monitoring
- Entered the language
- 20th century
- What changed
- Log moved from wood to a nautical record and then to recorded computer events; monitor moved from a person who warns to the act of observing a process.
How it is spelled
- Pattern
- The phrase is written as an open compound, with a space between its two words.
- Pattern
- Monitoring keeps the base monitor unchanged before the suffix -ing.
Spelled like
- network monitoring
- performance monitoring
- security monitoring
Broken into chunks
-
log
- logbook
- logging
-
monitor
- monitored
- monitorable
-
-ing
- tracking
- auditing
What it sits beside
Same subject
- audit trail
- anomaly detection
- incident response
- intrusion detection
Same shape
- network monitoring
- performance monitoring
- security monitoring
observability practices
- log monitoring
- metric monitoring
- trace analysis
security operations
- alert triage
- incident response
Where it sits in the deck
Phase 13: Detection, Monitoring, and Threat Intelligence
Defences eventually fail — learn how to detect, correlate, and investigate anomalies in real time across both AI-specific and traditional security telemetry.