Thanks for your reply. I discussed it with the customer. They want to make sure that the logs are complete despite any kind of external event, like power loss. So we can say it is the same use case as the real-time logs you mentioned. -- Tomas Sykora Security Technologies, Red Hat Inc.