Configure Chain of Remote Collectors

This topic describes how to chain Remote Collectors (also referred to as VLCs).

You can set up a chain of Remote Collectors to push event data to a Remote Collector, or you can configure a Remote Collector to pull event data from a chain of Remote Collectors.

  • Remote Collectors to push data. Push data from a Remote Collector to other Remote Collectors or Local Collectors.
  • Remote Collector to pull data. Use a Remote Collector to pull data from one or more Remote Collectors.

Configure Remote Collector to Push Event Data to Remote Collector

  1. Go to netwitness_adminicon_25x22.png (Admin) > Services.
  2. In Services, select a Remote Collector.

  3. Under Actions, select netwitness_ic-actns.png > View > Config to display the Log Collection configuration parameter tabs.

    The Log Collector Service Config view is displayed with the Log Collector General tab open.

  4. Select the Local Collectors tab.
  5. Select Destinations in the Select Configurations drop-down menu.

  1. In the Destination Groups panel section, select netwitness_icon-add.png.

    The Add Remote Destination dialog is displayed.

  2. Set up a Destination Group:

    1. Enter a Destination Name.
    2. (Optional) Enter a Group Name. If you leave Group Name blank, NetWitness sets it to the value that you specified in Destination Name.
    3. Select one or more collection protocols in the Collections drop-down list.

    4. Under Log Collectors Addresses, click netwitness_add.png to select a Remote Collector.

      netwitness_addremotedestrcpushrc.png

Note: If you do not select a collection protocol, the Remote Collector pushes all collection protocols to the Remote Collectors.

Configure Remote Collector to Pull Event Data from a Remote Collector

  1. Go to netwitness_adminicon_25x22.png (Admin) > Services.
  2. In Services, select a Remote Collector.

  3. Under Actions, select netwitness_ic-actns.png > View > Config to display the Log Collection configuration parameter tabs.

    The Service Config view is displayed with the Log Collector General tab open.

  4. Select the Local Collectors tab.

  5. Select Sources in the Select Configurations drop-down menu.

    netwitness_vlc_colltab_pul_750x337.png

  6. In the Remote Collectors panel, select netwitness_icon_add.png.

    The Add Source dialog is displayed.

  7. In the Add Source dialog:

    1. Select one or more collection protocols.

      If you do not select a collection protocol, the Remote Collector pulls all collection protocols from the Remote Collector.

    2. Click OK.

The Remote Collector is added to the Remote Collector section. When the Log Collector starts collecting data, it pulls event data from this Remote Collector.