Which security monitoring data type is associated with application server logs?

Alert data is generated by security tools such as IDS, IPS, or SIEM systems when a rule or threshold is triggered, not by application servers during normal operation.

Statistical data represents aggregated or summarized metrics about network or system behavior over time, derived from analysis of raw data rather than from server logs directly.

Session data captures network-layer flow information - such as source/destination IPs, ports, and duration - and is typically derived from NetFlow or firewall logs, not application server logs.

Transaction data refers to records generated by application and database servers that document discrete events or operations - such as HTTP requests, authentication events, or database queries - each representing a single application-layer transaction. Application server logs are the canonical source of transaction data because they record what happened, when, and between which parties at the application level.