Yet another question, I am full of them. As part of our migration from
Security Manager to Sentinel we are forwarding events from SM to
Sentinel. I am unable to find documentation on how that mechanisim
actually works. Are the events forwarded from the SM central computers
to Sentinel or does SM download the Sentinel location and the agents
forward events from that level? The reason I am asking is because we
are seeing events in Sentinel that are not logged in SM. As always many
thanks in advance for your help.


abel5405's Profile:
View this thread: