Stupid question perhaps but...does the Windows agent send event data to
the collector in real-time or does it wait for a heartbeat interval or
as a response to a poll by the collector? Does it send an event as soon
as it's generated in the log?

I know that if communication between the agent and collector is
interrupted the agent will cache the data and send it when comms are
restored. But I was wondering about normal activity.


tscislaw's Profile:
View this thread: