Skip to content

Glossary: Monitoring Tools and the Identity Life Cycle

Central log server

Also written: centralized logging, log forwarding

A server that receives copies of logs from many devices, usually by syslog, as each event happens. An attacker who deletes a device's local logs can't remove the central copies, and events can be compared across devices.

Where the book teaches it

Related terms

SyslogSyslog over TLSNTP (Network Time Protocol)SIEM (security information and event management)