QuestionQ3

Log Management

SecureTech Solutions, a managed security service provider (MSSP), is optimizing its log-management architecture to improve log storage, retrieval, and analysis efficiency. The SOC team must ensure that security logs are retained in a structured or semi-structured format that enables easy parsing, querying, and correlation of security events.

To accomplish this, they decide to use a log storage format that arranges data in a text file with a tabular structure, with every log entry stored in rows and columns. They also need a format that permits easy export to databases or spreadsheet-based analysis while preserving readability. Which log format should the SOC team select to store logs in a structured or semi-structured format for efficient analysis?

  • A Syslog Format
  • B Cloud Storage
  • C Comma-Separated Values (CSV) Format
  • D Database
Explanation

CSV is a readable text format in which each record is a separate line and fields are comma-delimited, producing a row-and-column structure. Optional header fields identify the columns, and the format is readily imported into spreadsheet applications and databases for analysis.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!