When real-time reporting of security events from multiple sources is being received, which function in SIEM provides capturing and processing of data in a common format?

IT Exam Items Repository › Category: CCNA CyberOps › When real-time reporting of security events from multiple sources is being received, which function in SIEM provides capturing and processing of data in a common format?

When real-time reporting of security events from multiple sources is being received, which function in SIEM provides capturing and processing of data in a common format?

aggregation
log collection
normalization
compliance

Explanation: SIEM combines SEM and SIM tools to provide some useful functions, one of which is data normalization. Data normalization is the process of mapping log messages from different systems into a common data model in order to analyze related security events, even if they are initially logged in different source formats.

When real-time reporting of security events from multiple sources is being received, which function in SIEM provides capturing and processing of data in a common format?

About The Author

ITExamAnswers Editorial Team