Sentinel leverages ArcSight SmartConnector to collect events from various types of event sources not directly supported by Sentinel. SmartConnectors collect events from supported devices, normalizes events into the Common Event Format (CEF), and forwards them to Sentinel through the Syslog Connector. The Connector then forwards the events to Universal Common Event Format Collector for parsing.
For more information about configuring Sentinel with SmartConnectors, see the Universal Common Event Format Collector documentation on the Sentinel Plug-ins Website.