Which of the following definitions best describes the concept of log correlation?

Log correlation is the process of analyzing log data from various sources to identify relationships, trends, and patterns that might indicate security incidents or operational issues. While combining logs (option 1) is a prerequisite, correlation goes further by actively searching and processing this data to detect anomalies or malicious activity that individual logs might not reveal. Simply making a record of events (option 3) is logging itself, not correlation. Analyzing individual log files (option 4) is a component of correlation but doesn't encompass the cross-source pattern recognition that defines it. The core of log correlation is finding meaningful connections across disparate log entries to uncover potential threats.