CISA archived Logging Made Easy and no longer maintains it: plan a supported replacement if you deployed LME

CISA’s Logging Made Easy page is now archived and says LME is still available on CISA’s GitHub page but is no longer being maintained. LME was a no-cost log management and threat detection tool for small and medium-sized organizations built on Elastic and Wazuh, with version 2.1.1 released August 19, 2025.

Source facts

CISA’s Logging Made Easy page is marked as archived content, which CISA says may not reflect current policy or programs, and says LME is still available on the CISA GitHub page but is no longer being maintained. It describes LME as a centralized, no-cost log management and threat detection solution for small to medium-sized organizations with limited resources, run locally so CISA cannot access its data.

The page says LME used Elastic and Wazuh for real-time alerting and analyzed Sysmon data to identify potential malicious activity, and that version 2.1.1 was released on CISA’s GitHub page on August 19, 2025. It points to the joint guide Best Practices for Event Logging and Threat Detection for defining a logging baseline.

Applicability

Use this if LME runs anywhere you manage. The archived page sets no end date for existing installations; without project maintenance, keeping its bundled components updated falls to the operator.

DSE recommendation

DSE recommends that any organization running LME plan its move to a maintained logging and detection platform, and keep LME’s components patched until the move is complete. Inventory which systems send logs to LME and which alerts staff rely on, export the detection rules and retention settings you need, and run the replacement in parallel before turning LME off.

Verification

Confirm the replacement receives logs from every source LME covered, compare alert volumes during the parallel run, and keep exported LME data as long as the retention policy requires.

Official reference

CISA — Logging Made Easy (archived). Reviewed October 19, 2026.