How does one-time audit log export differ from continuous audit log streaming?
Select an answer to reveal the explanation.
Short Explanation and Infographic
Export is a batch snapshot; streaming is the firehose for SIEM. Use export for investigations and offline analysis, streaming for ongoing detection. Export does not see the future, and streaming is enterprise audit scale — not 'public issue comments only.'
Full explanation below image
Full Explanation
The correct answer is point-in-time export versus continuous forwarding of new events. Enterprises often use both: streaming for SOC, export for specific legal holds or ad hoc analysis. Option B is impossible. Option C understates streaming scope. Option D is false. Ensure exported files are stored in access-controlled compliance buckets with encryption, and verify that streaming destinations remain healthy so you do not discover a silent gap only during an incident investigation months later.