This is a question that will vary on your usage of the LEM and your environment. Do you plan to use the LEM to collect only server logs or only networking logs or try to collect both? Ultimately the LEM would ideally have the ability to receive logs from everything in your environment, but if you only intend to monitor one thing or the other then that would be your answer.
↧