Which protocol is used to send system logs or event messages to a central server?

Which protocol is used to send system logs or event messages to a central server?

• A. Syslog
• B. Simple Network Management Protocol (SNMP)
• C. LDAP
• D. DHCP

Answer: (A)

Centralized logging uses Syslog. Syslog defines how log messages are created, labeled with facilities and severity, and delivered to a central log collector, making it the standard way to send system logs and events to a server. Devices and applications emit Syslog messages and forward them to a central syslog server, with common implementations like rsyslog or syslog-ng handling the collection and storage. While other protocols have different roles—SNMP focuses on monitoring and management (with traps and polls), LDAP is for directory services, and DHCP assigns IP addresses—they aren’t designed for centralized log transport.

Centralized logging uses Syslog. Syslog defines how log messages are created, labeled with facilities and severity, and delivered to a central log collector, making it the standard way to send system logs and events to a server. Devices and applications emit Syslog messages and forward them to a central syslog server, with common implementations like rsyslog or syslog-ng handling the collection and storage. While other protocols have different roles—SNMP focuses on monitoring and management (with traps and polls), LDAP is for directory services, and DHCP assigns IP addresses—they aren’t designed for centralized log transport.