312-39V2: Certified SOC Analyst v2

You work as a SOC analyst for a multinational company that has multiple data centers and remote offices. Security logs are kept locally at every site, which makes correlating incidents across locations difficult. Recently, an advanced persistent threat (APT) compromised multiple servers; however, because logs came from multiple sources and monitoring was inconsistent, the attack was not detected until after significant data exfiltration occurred.

To improve visibility, simplify log analysis, and support faster incident response, you need to implement a solution that aggregates logs from every source into one unified system. Which solution will you implement for your organization?