# What is syslog?

Syslog is a long-established standard for sending log messages from devices such as firewalls, switches, routers and servers to a central place. Instead of each device keeping its own small log that is overwritten after a few days, they all send their messages to a log server or a SIEM (security information and event management system). Central logs are harder for an attacker to delete and easier to search when you need to know what happened. Check that your important devices send syslog somewhere, that the clocks are correct, and that the storage keeps enough history for an investigation.

FAQ: [What is…? Network and security terms](https://netsenx.com/en/faq/glossary) · https://netsenx.com/en/faq/what-is-syslog

## Read next

- https://netsenx.com/en/what-is-ndr
- https://netsenx.com/en/problems-we-solve

## Related questions

- [What is SNMP?](https://netsenx.com/en/faq/what-is-snmp)
- [What is an endpoint?](https://netsenx.com/en/faq/what-is-an-endpoint)
- [What is a host in networking?](https://netsenx.com/en/faq/what-is-a-host-in-networking)
- [What is a DMZ in networking?](https://netsenx.com/en/faq/what-is-a-dmz-in-networking)
- [What are egress and ingress traffic?](https://netsenx.com/en/faq/what-is-egress-and-ingress-traffic)