About Agent Manager infra issue

Hi All

    Now a protential customer want to collecto windows event by using agent manager..

the device about 5 hundred , I want to use 2/3 agent central computer to provide loading.

I had see a information like below:


These agents might send events directly to the Connector (NetIQ Security Agent for UNIX) or indirectly by using Sentinel Agent Manager.


But I forgot which document it is, can someone kindly provide me with the link?

and base on this information , windows event seem send event to central computer then re-send to connector (TCP1590 on Sentinel or Collector manager) , which which resource that I need set more ?