SmartConnectors

SmartConnectors are collectors of security event information generated by multi-vendor security devices throughout your enterprise. SmartConnectors normalize and correlate this data into Events, expressed as ArcSight Messages, which are forwarded to the Connector Data Manager (a component of the Manager) for further processing. SmartConnectors can reside on a device, on the Manager, or on a host machine. (For more information on SmartConnectors, see also Managing SmartConnectors.)

Caution: Do not delete a Connector resource at the Console unless the corresponding SmartConnector is first uninstalled from the device it is running on. If the SmartConnector running on the device has not been uninstalled, and its Connector resource is deleted, the SmartConnector will lose its connection to the Manager, causing the SmartConnector to start caching events and eventually dropping them.