Collectors are simple textual scripts that are run by a Collector Manager. The handling of these scripts is a bit complex:
The code for all Collectors is stored in a Plugin Repository on the central Sentinel server when they are imported.
Location: <Install Directory>\data\plugin_repository on the Sentinel server.
The runtime configuration for the Collector (when it is configured to run on a particular Collector Manager) is stored separately in the Sentinel database.
When a Collector is actually started on the Collector Manager, the Collector plug-in is deployed to the Collector Manager in real time, the runtime configuration is applied, and the code is started. Any preexisting instance of the Collector code on that Collector Manager is overwritten.
Location: <Install Directory>\data\collector_mgr.cache\collector_instances on each Collector Manager.
In order to edit a Collector, you need to use the ESM Debuggger
button, which copies the Collector to the local Collector Workspace on the client machine (the machine where you are running SCC). Edits are made against that local copy and then uploaded back into the central Plugin Repository.Location: <Install Directory>\data\collector_workspace on the client application machine.
For trademark and copyright information, see Legal Notices.