▲
8
Agent based or agentless collection at 200 servers?
Agents mean deployment and updates. Agentless means firewall rules everywhere. Which is less painful in practice?
Agents mean deployment and updates. Agentless means firewall rules everywhere. Which is less painful in practice?
Both, and that is fine. Agentless for anything that already speaks syslog, agents where you need file tailing, buffering or local state.
Windows event logs and application log files both need an agent. Network gear and appliances cannot take one. Most estates end up mixed, and the mistake is picking one on principle then fighting it for two years.