Log management includes all processes and techniques used to collect, aggregate, and analyze computer-generated log messages. True or False?

• A. False
• B. It depends on the system
• C. True
• D. Not part of log management

Answer: (C)

Log management involves handling log data from computers and devices, including how it is collected, centralized (aggregated), and analyzed. Those three activities are the essential lifecycle steps: you gather logs from many sources, bring them together in a central place, and examine them to detect events, troubleshoot problems, and gain insights. The statement is true because it accurately describes the core activities of log management. In practice, log management also covers other tasks like parsing, normalization, indexing, storage and retention, and alerting, but choosing the described collection, aggregation, and analysis reflects the fundamental scope of log management.