Agent and Agentless Monitoring with EventTracker

Choosing the Right SIEM

An agent is a small software program that resides on the monitored machine and forwards log messages and other information from the local system to a remote collector. Platforms that natively send their log messages to remote collectors do not need an agent.

EventTracker supports both agent and agentless collection of logs. This paper helps readers understand agents and when they should or should not consider them.