How do logs differ from monitoring data in ITOM?

• A. Logs are detailed event records
• B. Logs are metrics and health indicators used for real-time assessment
• C. Monitoring data are detailed event records
• D. Monitoring data are deprecated and no longer used

Answer: (A)

The main idea here is how the data are used and what they contain. Logs are detailed event records. They capture specific occurrences with context—timestamps, sources, messages, and often user or error details—so you can investigate exactly what happened and when. This makes logs ideal for post-incident analysis, auditing, and troubleshooting.

Monitoring data, by contrast, are metrics and health indicators collected at intervals to show how the system is performing in real time. Think of numbers like CPU usage, memory utilization, request latency, error rates, and uptime—numbers that feed dashboards and alerts to signal the current health of the environment.

So the statement that logs are detailed event records best captures their role. The other options mix up the distinction: logs are not primarily real-time metrics, and monitoring data are not simply detailed event records. Also, monitoring data are not deprecated; they remain a core part of ITOM monitoring.