Exam CS0-003 topic 1 question 129 discussion

Correct Configuring the servers to forward logs to a SIEM is the most effective way to achieve central visibility into events occurring throughout the corporate environment without having to log in to each server individually

By configuring the servers to forward logs to a SIEM, security analysts can centrally collect and analyze log data from multiple servers without the need to log in to each server individually. This provides a centralized view of the events occurring throughout the corporate environment, allowing analysts to more easily detect and respond to security incidents. Deploying a database to aggregate logging could be part of a logging solution but does not provide the same level of centralized visibility as a SIEM. Sharing log directories or automating the emailing of logs would require manual effort and would not provide the same level of centralized visibility and analysis capabilities as a SIEM.