nerdexam
Cisco

300-910 · Question #63

Refer to the exhibit. The IT team is creating a new design for a logging system. The system must be able to collect logs from different components of the infrastructure using the SNMP protocol. When t

The correct answer is C. log parser. In a logging system design, after collecting raw log data, a crucial intermediate step is to transform this data into a structured and queryable format before it can be efficiently stored and presented. This transformation process is handled by a dedicated component.

Monitoring and Logging

Question

Refer to the exhibit. The IT team is creating a new design for a logging system. The system must be able to collect logs from different components of the infrastructure using the SNMP protocol. When the data is collected it will need to be presented in a graphical UI to the NOC team. What is the architectural component that needs to be placed in the unlabeled box to complete the design?

Options

  • Amessage queue
  • Bweb server
  • Clog parser
  • Dtime-series database

How the community answered

(21 responses)
  • A
    5% (1)
  • B
    10% (2)
  • C
    86% (18)

Why each option

In a logging system design, after collecting raw log data, a crucial intermediate step is to transform this data into a structured and queryable format before it can be efficiently stored and presented. This transformation process is handled by a dedicated component.

Amessage queue

A message queue is used for buffering and reliable transport of messages, but it does not perform the parsing and structuring of raw log data itself.

Bweb server

A web server is typically responsible for serving the graphical UI to users, not for processing or structuring the collected log data before it's displayed.

Clog parserCorrect

After collecting raw log data, especially via protocols like SNMP which may provide unstructured or semi-structured messages, a log parser is essential. Its role is to process these raw logs, extract meaningful fields (e.g., timestamp, severity, source, event ID), and transform them into a structured format, making the data suitable for storage in a database and subsequent presentation in a graphical user interface for analysis by the NOC team.

Dtime-series database

A time-series database is used to store parsed and structured log data for efficient querying and visualization, but it relies on the data already being processed into a suitable format by a preceding component like a log parser.

Concept tested: Logging system architecture, log parsing, SNMP

Source: https://en.wikipedia.org/wiki/Log_management

Topics

#logging system design#log parsing#SNMP#data transformation

Community Discussion

No community discussion yet for this question.

Full 300-910 Practice