Improved system performance: The additional Collector Managers can parse and process event data in a distributed environment, thus increasing the system performance.

Additional data security and decreased network bandwidth requirements: If the Collector Managers are co-located with event sources, then filtering, encryption, and data compression can be performed at the source.

Ability to collect data from additional operating systems: For example, you can install a Collector Manager on Microsoft Windows to enable data collection through the WMI protocol.

File caching: The remote Collector Manager can cache large amounts of data while the server is temporarily busy archiving events or processing a spike in events. This feature is an advantage for protocols, such as syslog, that do not natively support event caching.