A method for searching encrypted log data comprising: generating with a logging machine a first log message including first plaintext content; identifying with the logging machine at least one keyword in the first log message; encrypting with the logging machine the first log message using a first cryptographic key to produce a first encrypted log message; generating with the logging machine a first encrypted searchable representation of the first log message including the at least one keyword using a second cryptographic key, the second cryptographic key being different than the first cryptographic key; transmitting with the logging machine the first encrypted searchable representation to an auditor; performing with the auditor a search to identify at least one search keyword in the first encrypted searchable representation, the auditor using the second cryptographic key to access the first encrypted searchable representation; generating with the auditor a first output indicating presence or absence of the at least one search keyword from the first log message, the first output not including the first plaintext content of the first log message; applying with the logging machine a one-way function to the first cryptographic key to generate an updated first cryptographic key, the updated first cryptographic key being different than the first cryptographic key; applying with the logging machine the one-way function to the second cryptographic key to generate an updated second cryptographic key, the updated second cryptographic key being different than the second cryptographic key; generating with the logging machine a second log message including second plaintext content; identifying with the logging machine at least one keyword in the second log message; generating with the logging machine a second encrypted searchable representation of the second log message including the at least one keyword using the updated second cryptographic key; encrypting with the logging machine the second log message using the updated first cryptographic key to produce a second encrypted log message; transmitting with the logging machine the second encrypted searchable representation to the auditor; applying with the auditor the one-way function to the second cryptographic key to generate the updated second cryptographic key; performing with the auditor another search to identify the at least one search keyword in the second encrypted searchable representation, the auditor using the updated second cryptographic key to access the second encrypted searchable representation; and generating with the auditor a second output indicating presence or absence of the at least one search keyword from the second log message, the second output not including the second plaintext content of the second log message. generating with a logging machine a first log message including first plaintext content; identifying with the logging machine at least one keyword in the first log message; encrypting with the logging machine the first log message using a first cryptographic key to produce a first encrypted log message; generating with the logging machine a first encrypted searchable representation of the first log message including the at least one keyword using a second cryptographic key, the second cryptographic key being different than the first cryptographic key; transmitting with the logging machine the first encrypted searchable representation to an auditor; performing with the auditor a search to identify at least one search keyword in the first encrypted searchable representation, the auditor using the second cryptographic key to access the first encrypted searchable representation; generating with the auditor a first output indicating presence or absence of the at least one search keyword from the first log message, the first output not including the first plaintext content of the first log message; applying with the logging machine a one-way function to the first cryptographic key to generate an updated first cryptographic key, the updated first cryptographic key being different than the first cryptographic key; applying with the logging machine the one-way function to the second cryptographic key to generate an updated second cryptographic key, the updated second cryptographic key being different than the second cryptographic key; generating with the logging machine a second log message including second plaintext content; identifying with the logging machine at least one keyword in the second log message; generating with the logging machine a second encrypted searchable representation of the second log message including the at least one keyword using the updated second cryptographic key; encrypting with the logging machine the second log message using the updated first cryptographic key to produce a second encrypted log message; transmitting with the logging machine the second encrypted searchable representation to the auditor; applying with the auditor the one-way function to the second cryptographic key to generate the updated second cryptographic key; performing with the auditor another search to identify the at least one search keyword in the second encrypted searchable representation, the auditor using the updated second cryptographic key to access the second encrypted searchable representation; and generating with the auditor a second output indicating presence or absence of the at least one search keyword from the second log message, the second output not including the second plaintext content of the second log message.