300-910 · Question #63
Refer to the exhibit. The IT team is creating a new design for a logging system. The system must be able to collect logs from different components of the infrastructure using the SNMP protocol. When t
The correct answer is C. log parser. In a logging system design, after collecting raw log data, a crucial intermediate step is to transform this data into a structured and queryable format before it can be efficiently stored and presented. This transformation process is handled by a dedicated component.
Question
Options
- Amessage queue
- Bweb server
- Clog parser
- Dtime-series database
How the community answered
(21 responses)- A5% (1)
- B10% (2)
- C86% (18)
Why each option
In a logging system design, after collecting raw log data, a crucial intermediate step is to transform this data into a structured and queryable format before it can be efficiently stored and presented. This transformation process is handled by a dedicated component.
A message queue is used for buffering and reliable transport of messages, but it does not perform the parsing and structuring of raw log data itself.
A web server is typically responsible for serving the graphical UI to users, not for processing or structuring the collected log data before it's displayed.
After collecting raw log data, especially via protocols like SNMP which may provide unstructured or semi-structured messages, a log parser is essential. Its role is to process these raw logs, extract meaningful fields (e.g., timestamp, severity, source, event ID), and transform them into a structured format, making the data suitable for storage in a database and subsequent presentation in a graphical user interface for analysis by the NOC team.
A time-series database is used to store parsed and structured log data for efficient querying and visualization, but it relies on the data already being processed into a suitable format by a preceding component like a log parser.
Concept tested: Logging system architecture, log parsing, SNMP
Source: https://en.wikipedia.org/wiki/Log_management
Topics
Community Discussion
No community discussion yet for this question.