Logging Made Easy is a set of scripts and documentation that installs Sysmon on a Windows estate with an Elasticsearch backend. An National Cyber Security Centre (NCSC) project that aims to help small organisations to gain a basic level of centralised security logging and eventually provide functionality to detect attacks.LME is designed to be quick to deploy logging solution giving you access to useful logs when you need them.This talk will aim to provide a window into the history of LME, where the project was born from and how the design decisions and community input lead LME to its current pasture. War stories of deployments catching everything from bad users to bad software and even how one tweet nearly broke the internet.Aimed at a moderately technical audience this talk will cover the selection of data sources, How logs are securely transmitted and how these can then be effectively interrogated to identify nefarious activity and assist in investigations.