What is syslog?

Syslog is a long-established standard for sending log messages from devices such as firewalls, switches, routers and servers to a central place. Instead of each device keeping its own small log that is overwritten after a few days, they all send their messages to a log server or a SIEMSIEM: security information and event management. A system that collects logs from many systems and looks for patterns across them. (security information and event management system). Central logs are harder for an attacker to delete and easier to search when you need to know what happened. Check that your important devices send syslog somewhere, that the clocks are correct, and that the storage keeps enough history for an investigation.

← All 69 questions on What is…? Network and security termsAll topics