[Autogenerated] This is a requirement that's often outsourced.
So there are a lot of managed security managed service
providers manage security service providers that will put
devices in that will collect your logs, consume them on,
then put them into their managed service center.
Right.
Is that okay to CSS?
It is right.
And this is the thing that I think I've said on stage
in speaking events or other places.
Um, it's really, like 20%.
What?
The tool is a sort of 80% what you do with it.
So whether you buy some expensive, you know,
commercial log analysis package,
whether you pay some third-party to do it right in the end,
what that's going to do is it's going to take all that
log data is gonna consume its going to, analyze it.
However it does right.
And the however it does is important, right?
And you want to understand that,
and you want to probably tune that to your environment,
right?
But setting aside the sort of complexity of that in the end,
it's been going to yield some sort of alert.
Right?
I found something that looks suspicious,
or I found something that meets some set of criteria,
and I'm going to alert it on.
So whether that's your own software that tells you hey,
there's an alert or it's, um, third-party,
you know,
sending you some notification based on however you set up
those notifications right then you as the organization
ultimately get that back right, and then you have to go do something about right.
And if it's just so, we pay a third-party and they sent us alert.
Well, what happens when you get an alert?
Because that that covers some of the requirement.
But it doesn't cover the requirement off and do
something and then do something about it,
absolutely.
But the important part, right?
But some of the important parts,
like one line isn't it was The unimportant part is like five pages.
That is often the case