# Logging for Detection and Response: How We Build Security Signals at Cockroach Labs

DevFeed: [Logging for Detection and Response: How We Build Security Signals at Cockroach Labs](<https://devfeed.tech/articles/logging-for-detection-and-response-how-we-build-security-signals-at-cockroach-labs-23792.md>)

Original publisher: [Read original article](<https://cockroachlabs.com/blog/logging-for-detection-and-response>)

Author: Munir Jaber

Published: 2026-01-15T00:00:00Z

Content type: article

Language: en

Sources: [Cockroach Labs](<https://devfeed.tech/sources/cockroach-labs.md>)

Topics: [Logging](<https://devfeed.tech/topics/logging.md>), [Security](<https://devfeed.tech/topics/security.md>), [Incident response](<https://devfeed.tech/topics/incident-response.md>), [CockroachDB](<https://devfeed.tech/topics/cockroachdb.md>), [Architecture & Design](<https://devfeed.tech/topics/architecture-design.md>), [SIEM, Security](<https://devfeed.tech/topics/siem-security.md>)

Tags: [architecture](<https://devfeed.tech/tags/architecture.md>), [cockroachdb](<https://devfeed.tech/tags/cockroachdb.md>), [incident-response](<https://devfeed.tech/tags/incident-response.md>), [logging](<https://devfeed.tech/tags/logging.md>), [security](<https://devfeed.tech/tags/security.md>), [siem](<https://devfeed.tech/tags/siem.md>), [testing](<https://devfeed.tech/tags/testing.md>)

## AI overview

Cockroach Labs describes a security logging architecture for Detection and Response around CockroachDB and its supporting cloud services. The approach prioritizes logs that capture meaningful behaviors, support event reconstruction, and provide useful signals for detection and incident response, with detection rules reviewed and tested like software.

## Source excerpt

Modern applications rely on CockroachDB for workloads where resilience, correctness and availability are absolutely critical. Whether it's being deployed for payment systems, identity provider systems, or transactional systems, one thing is certain: If the underlying database platform of these applications isn't secure, nothing built on top of it can be truly secure, either.