“You go through, you create the logging of that information, and then you have to take those logs.”

Transcript evidence from Neil Smithline -- OWASP Top 10 #10: Logging.