Abstract
This article explores how syslog can assist with the compliance of parts of the IEC 62351 standard and its effective utilization. Through a series of illustrative scenarios, it showcases the potential use of syslog in cases where incident response is necessary. Additionally, it outlines the extended benefits of incorporating syslog into operational technology environments, beyond the confines of the IEC 62351 standard.