Start free

Browse › Cyber Defense Analyst Training Series

Collecting Logs and Verifying Syslog Aggregation

Scored lab

Part of Cyber Defense Analyst Training Series Topic: Cyber Security Labs

Counts towardsCompTIA CySA+ badge

Access

Included in StationX Membership — unlimited attempts

🔒 StationX Membership — $299 / year ($24.92/mo billed annually)

Already have access? Sign in.

New to this? Try a free practice lab — a scripted hacking challenge in your browser, no account needed.

What you'll do

Collecting and aggregating logs are very essential to any organization.

  • There are many methods of collecting logs.
  • Two methods are the push method (the target systems send the logs) and the pull method (where the logging device itself pulls the logs off target devices).
  • This lab will deal with the most common method, pull method, used today in log aggregation, that is, ie.
  • Syslog or RFC 5424.
  • This lab will break this process up into a micro-step where logs will be aggregated in a virtual environment and then then verified that they are actually being received.

Scored lab. A scored lab checks your work and records a score you can see on the lab page.

Roadmaps that use this lab