Page tree
Skip to end of metadata
Go to start of metadata

Collectors are logical entities composed of discovery settings. Users create and then configure them to flow among a Command Center and one or more Scouts, gathering data.  The collectors carry indexing/discovery definitions, instantiate and perform passive, active, and targeted discovery, reference interfaces, watch message queues, and transmit collected data back to the Lumeta Command Center. 

Multiple collectors can work together collaboratively within a zone, collecting and exchanging more network data as a unit than any one of them could alone. Collectors can also be configured to not share information, which is useful when you want to contain the time-to or scope-of discovery, ensure that discovery does not extend out to a classified enclave or the Internet, or more clearly understand what results are generated by a particular collector's activity. 

A collector does not probe a network or perform any activity until you enable it. Also, a collector that has not been associated with any discovery settings will not run.  Collectors can be associated with either a Command Center or a Scout.


To manage a variety of collectors, you'll need to know how to add, edit and disable them. This page covers the basics. See Collector Configuration & Rescanning and Configuration for more.

Add Collector & Enable Collector

This procedure describes how to add a collector to the Command Center's own internal interface. To enable a collector, just select the Enable Collector checkbox during this procedure. If your system is distributed, you will also need to assign collectors to Scouts.

  1. Browse to Settings > Zones.
  2. In the Available Zones list, select the zone to which you want to add/enable a collector.
  3. Click Zone Collectors  > Add.
  4. Complete the modal and click Create.
     

    1. If you would like the collector to start doing its job as soon as you create it, select the Enable Collector checkbox.

    2. To create a collector and have it ready to run at another time, clear the Enable Collector checkbox. If you are following the QuickStart Guide, leave the Enable Collector box unchecked.

    3. The rescan interval specifies how often the collector is to perform its routine, in minutes. 

    4. The interface identifies the Lumeta component–Command Center or Scout-- to which you want to associate the collector and is managed in the Lumeta application in Settings > Lumeta Systems.

  5. Your new collector is added to the list of collectors.

Edit Collector

To edit a collector, do the following:

  1. Browse to the Settings > Zones page.
  2. Select the zone and collector you want to revise, and then click Edit

  3. Revise the settings as needed and then click Update.
  4. Your revised collector displays in the list.

Disable Collector

Collectors are often defined, used, and reused across a number of zones and by a variety of Lumeta users. Consequently, collectors are activated and deactivated as needed, rather than deleted. Deactivate your collectors before upgrading to the next version of Lumeta.

Disable a collector as follows:

  1. Browse to the Settings > Zones page. 
  2. Select the zone containing the collector you want to disable.
  3. Click Edit.
  4. Clear the Enable Collector checkbox.
  5. Click Update.
    The collector is disabled. 

Archive Collector

See Archiving a Collector

  • No labels
Write a comment...