Login to manage your account

Your email Please enter a valid email address.

Password Forgot Password?

Please enter a valid password.

OR

Don't have an account yet? Sign up

Why should logs be centralised off the originating host?

A So evidence survives if that host fails or is compromised
B To save local disk space only
C To improve application speed
D Because local logs cannot be read

Answer

So evidence survives if that host fails or is compromised

Attackers routinely clear local logs, so centralised immutable logging is what makes an investigation possible afterwards.

Login to manage your account

Your email id Please enter a valid email address.

Password Forgot Password?

Please enter a valid password.

OR

Don't have an account yet? Sign up as

Jobseeker

Employer