How are the log files protected and are they in a different location from the systems themselves?

Only the log process has write access to the log files. The system logs are also written to external loggers at I&I (KNAW). This does not (yet) apply to the application and web server logs.