Now a protential customer want to collecto windows event by using agent manager..
the device about 5 hundred , I want to use 2/3 agent central computer to provide loading.
I had see a information like below:
These agents might send events directly to the Connector (NetIQ Security Agent for UNIX) or indirectly by using Sentinel Agent Manager.
But I forgot which document it is, can someone kindly provide me with the link?
and base on this information , windows event seem send event to central computer then re-send to connector (TCP1590 on Sentinel or Collector manager) , which which resource that I need set more ?