Using the SMP local collector instead of a remote collector with TIBCO LogLogic SEM

Using the SMP local collector instead of a remote collector with TIBCO LogLogic SEM

book

Article ID: KB0077415

calendar_today

Updated On:

Products Versions
TIBCO LogLogic Security Event Manager all versions

Description

TIBCO advises NOT using the SMP local collector for collecting logs over using a remote collector.

The SMP local collector is only designed to gather the logs of the SMP server itself, not to collect logs from remote sources.

In case you have a small amount of logs to collect and you really want to use the SMP local collector, remember that:

  • You should tune the collector memory parameters so it can support more events per second (EPS).
  • Events will be lost whenever you upgrade the SMP.

Issue/Introduction

This article explains using the SMP local collector instead of a remote collector.