Encryption at rest?

[Brian Lalonde]

Some security questions about sensitive log data:

What backend is Seq using for log data?

Is the log data encrypted on disk?

Thanks!

[nblum...@nblumhardt.com]

Hi Brian,

Enabling BitLocker on the drive containing Seq's data is the recommended approach to this currently. Does that line up with your goals?

Best regards,

Nick

[nblum...@nblumhardt.com]

Apologies - I missed your first question.

Seq is using a custom log store (so accessible only via Seq's own API). ESENT (a Windows component) is used in the storage layer, but it's mostly an implementation detail from a security standpoint.

On Thursday, May 14, 2015 at 9:26:16 AM UTC+10, Brian Lalonde wrote:

[Brian Lalonde]

Any reason standard NTFS encryption wouldn't be sufficient?

BitLocker requires a physical drive, which adds hassle to a VM environment.

Thanks!

[nblum...@nblumhardt.com]

Hi Brian,

From the perspective of Seq either should be fine.

Cheers!

Nick