A chronological record of system events and activities. It makes possible a review or reconstruction of the entire chain of events surrounding an event or operation on the computer systems in question.