What time frame should an event log cover?

• A. 6-Hour Period
• B. 12-Hour Period
• C. 24-Hour Period
• D. 48-Hour Period

Answer: (C)

Capturing a complete daily cycle in the event log is essential because it allows all events that occur within a single calendar day to be recorded together, enabling accurate daily analysis and auditing. The 24-hour period aligns with the standard calendar day, so events near midnight stay in the same log and aren’t split across windows. This makes trend analysis, incident review, and reporting consistent from day to day. Shorter windows like six or twelve hours would slice a single day into multiple logs, which can obscure timelines and complicate reconciliation with other daily data. A longer window, such as forty-eight hours, would cover two days, making it harder to attribute events to a specific day and obscuring daily patterns. Therefore, the appropriate time frame for an event log is a 24-hour period.