Which three items are true with regard to the Cisco Security MARS syslog forwarding feature for relaying the received syslog data to a syslog server? (Choose three.)
A.
The configured collector is a designated host that receives a syslog message but the collector does not relay it to another host.
B.
Cisco Security MARS can forward alert data to multiple collector IP addresses.
C.
Syslog forwarding is disabled until you specify the collector and at least one source host.
D.
The pnparser service should be running for the syslog forwarding feature to work.
PassGuide 642-545