|
Build / Edit Collector |
Building, Modifying or editing a Collector was possible in Collector Builder in 5.x |
Building, Modifying or editing a Collector is possible in Collector Builder in 6.0 |
|
Import Collector |
Importing a Collector is not applicable in 5.x |
You can import a Collector from Sentinel Control Center in 6.0 |
|
Deploy Collector |
Deploy Collector was possible in Collector Builder in 5.x |
Deploy Collector is possible in Sentinel Control Center in 6.0 |
|
Debug Collector |
A debugging interface that enabled a user to step through the parsing logic in a Collector. This interface was available in Collector Builder in Sentinel 5.x |
In ESM, this is now done through the ESM panel in Sentinel Control Center. To debug a Collector in ESM, right click the Collector node you want to debug and select the Debug option. |
|
Storage location for files for Collectors in development |
%ESEC_HOME%\wizard\Elements
on Collector Builder machine |
%ESEC_HOME\data\collector_workspace
on Collector Builder machine |
|
Storage location for files for running Collectors |
%ESEC_HOME%\wizard\Elements
on Collector Manager machine |
%ESEC_HOME%\data\collector_mgr.cache\collector_instances
on Collector Manager Machine |
|
Collectors Scripts |
Collector Scripts were managed from Collector Builder in Sentinel 5.x |
In Sentinel Control Center, Collector Scripts are plugins in 6.0. A Collector Script plugin must be added to the plugin repository before it can be deployed as a Collector. Collector parameters are now set when deploying a Collector in ESM. |
|
Port Configurations |
The configuration of the connection to the event source as well as the Collector to parse the data from the event source. Port Configurations were managed from Collector Builder in Sentinel 5.x |
In ESM, this configuration is now managed in the ESM panel in Sentinel Control Center. The connection mechanisms are now plugins, which must be added to plugin repository before being deployed as Event Sources. |
|
Collector Health Status View |
A real-time view of the status (For example, on, off, events per second and so on) of Port Configurations configured across all Collector Managers. This view was available in the Sentinel Control Center in Sentinel 5. |
In ESM, status information is now viewable in both graphical and tabular format of the ESM panel in Sentinel Control Center. |
|
WORKBENCH_HOME directory |
The WORKBENCH_HOME directory which was available in Sentinel 5.x and prior versions no longer exists. |
|