Glossary: Vulnerability Management and Monitoring

log aggregation

Also written: log aggregator, aggregate logs

Collecting logs from all sources into one central place, where they are parsed into common fields and stored, so one search covers every source and copies survive if an attacker deletes local logs. A log aggregator only collects and stores; a SIEM adds correlation and alerting.