Glossary: Monitoring Tools and the Identity Life Cycle
Central log server
Also written: centralized logging, log forwarding
A server that receives copies of logs from many devices, usually by syslog, as each event happens. An attacker who deletes a device's local logs can't remove the central copies, and events can be compared across devices.
Where the book teaches it
Related terms
SyslogSyslog over TLSNTP (Network Time Protocol)SIEM (security information and event management)