NXLog Legacy Documentation

NXLog Glossary & Terms

As you dig deeper into the topic of log collection and SIEM, you might come across some IT security-related terminology or acronyms you haven’t encountered before. In this section of the documentation, we will enumerate and explain the most commonly used IT expressions in IT security and log collection to make your research easier.

A B C D E F G H I J K L M N O P R S T U V W X Z

A

agent-based log collection

agentless log collection

B

C

CEF (Common Event Format)

CSV (Comma-separated Values)

D

E

endpoint security

EPS (Events Per Second)

ETW (Event Tracing for Windows)

event correlation

F

G

GELF (Graylog Extended Log Format)

H

High Availability (HA)

I

ICMP (Internet Control Message Protocol)

IDS (Intrusion Detection System)

J

JSON (JavaScript Object Notation)

K

KVP (Key-Value Pair)

L

LEEF (Log Event Extended Format)

log centralization

log normalization

M

MSSP (Managed Security Service Provider)

multi-line logs

N

O

P

PCI-DSS (Payment Card Industry Data Security Standard)

R

Raijin database

Remote Access Server Role

S

SCCM (System Center Configuration Manager)

SEM (Security Event Management)

SIM (Security Information Management)

SIEM (Security Information and Event Management)

SNMP (Simple Network Management Protocol)

SOC (Security Operations Center)

structured logging

T

TCP (Transmission Control Protocol)

TLS (Transport Layer Security)/SSL (Secure Sockets Layer)

U

UEBA (User and Entity Behavior Analytics)

UDP (User Datagram Protocol)

V

vendor-agnostic

W

W3C Extended Log File Format

WEC (Windows Event Collector)

WEF (Windows Event Forwarding)

Windows Event ID

WMI (Windows Management Instrumentation)

X

Z