MENU
Which plug-in is used by the Cloud Pak for Data Audit Logging service to forward audit records to a SIEM system?
Suggested Answer: C
Get Premium C1000-173 Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
The Audit Logging service in IBM Cloud Pak for Data uses Fluentd as the core log forwarding mechanism. Fluentd output plug-ins are configured to route audit logs to external SIEM systems such as Splunk or QRadar. These plug-ins are versatile and support multiple formats and transport protocols. Other options listed---like Logstash, OSS/J, or Kafka---are not the designated default forwarding mechanisms used within the CP4D Audit Logging architecture.
14 comments · newest first
KE
Kenia
10 months ago
OSS/J is the right choice for sure!
FR
Frankie
10 months ago
Wait, is it really Apache Kafka output? That sounds off.
NI
Nina
10 months ago
Definitely Logstash output, no doubt.
ST
Stephaine
10 months ago
I thought it was Logstash too, but now I'm not so sure.
PE
Peter
10 months ago
I think it's Fluentd output!
DA
Darnell
11 months ago
I vaguely remember Apache Kafka being mentioned, but I thought it was more for streaming data rather than audit logs.
DE
Deandrea
11 months ago
Logstash output sounds familiar, but I can't remember if it was the right choice for forwarding audit records.
GA
Galen
11 months ago
I feel like OSS/J was discussed in relation to audit logging, but I can't recall if it was specifically for Cloud Pak for Data.
RO
Rozella
11 months ago
I think the answer might be Fluentd output, but I'm not entirely sure. I remember it being mentioned in one of the practice sessions.
VI
Virgina
12 months ago
This looks like a tricky one, but I'm going to give it my best shot. I'll start by eliminating any options that don't seem relevant to the Cloud Pak for Data service, then try to narrow it down from there.
OC
Ocie
12 months ago
I'm a bit confused by the options here. I know Logstash and Fluentd are log aggregation tools, but I'm not sure how they relate to the Cloud Pak for Data service. I'll need to do some research on that.
RI
Rikki
12 months ago
Okay, I think I've got a strategy here. The question is asking about the plug-in used to forward audit records to a SIEM system, so I'll need to focus on the options related to log forwarding.
LO
Louisa
1 year ago
Hmm, this seems to be asking about a specific plug-in used by the service. I'll need to review the documentation to see if I can find that information.
SE
Serita
1 year ago
I'm not too familiar with the Cloud Pak for Data Audit Logging service, so I'll need to think this through carefully.