Match the SIEM function with the description.

- links logs and events from disparate systems or applications, speeding detection of and reaction to security threats : correlation
- satisfies the requirements of various compliance regulations :
- reduces the volume of event data by consolidating duplicate event records : aggregation
- maps log messages from different systems into a common data model : normalization
Related exam: Modules 24 - 25: Protocols and Log Files Group Exam
