Didn't I answer this one a few days ago? Is this an item from the Cisco Exam? The answer is (probably) "signature based", but could be any number of other things.
Higher headquarters has acquired a software package to centrally collect logging data from numerous servers, switches, firewalls, printers, routers etc. This type of IDS/IPS system is commonly referred to as a __________________ IDS/IPS system?