If security-relevant events are insufficiently logged by a web application or a web service, they may be difficult to trace at a later time. This may make it impossible to ascertain the causes of an event. For example, critical errors or unauthorised changes in the configuration of a web application may be overlooked.