Security discipline that use data inspection tools to centralize the storage and interpretation of logs or events generated by other software running on a network.