Logging

What it is

Security logs record relevant events without unnecessary sensitive data.

When to use it

Log failures, actor IDs, request IDs, and safe reason codes.

Syntax

Log::warning("Authorization denied", ["actor_id" => $user->id, "action" => "transfer.approve"]);

Example

// Bad: Log::debug("Request", $request->all());
// Good:
Log::notice("Login failed", ["request_id" => $requestId, "reason" => "invalid_credentials"]);

Common mistakes

Avoid tokens, passwords, financial details, and user-controlled multiline log messages; define retention/access.

Related topics