Problem Statement
Why is log aggregation and centralisation important in system security?
Explanation
By centralising logs from endpoints, servers, network devices and applications into one location, security teams can correlate events across systems, identify patterns and detect threats which individual logs alone may not reveal. This is a key capability in modern system security operations.
