Networks & Defense
Log Aggregation
Also: centralised logging, log shipping
Sending logs from many machines to one separate place as they are written.
In more detail
A single collector lets responders search across machines during an incident and keeps a copy that an intruder on the original machine cannot edit or delete. It needs synchronised clocks, access controls, a retention period, and care not to ship secrets into the log store.
