IBM Exam C1000-173 Topic 4 Question 3 Discussion

The Audit Logging service in IBM Cloud Pak for Data uses Fluentd as the core log forwarding mechanism. Fluentd output plug-ins are configured to route audit logs to external SIEM systems such as Splunk or QRadar. These plug-ins are versatile and support multiple formats and transport protocols. Other options listed---like Logstash, OSS/J, or Kafka---are not the designated default forwarding mechanisms used within the CP4D Audit Logging architecture.