Installation Prerequisites for WinCollect
Before you can install WinCollect agents, you must verify that your deployment meets the installation requirements.
Distribution Options for WinCollect Agents
WinCollect agents can be distributed in a remote collection configuration or installed on the local host. The following WinCollect collection methods are available: local and remote.
Local collection--The WinCollect agent collects events only for the host on which it is installed. You can use this collection method on a Windows host that is busy or has limited resources, for example, domain controllers.
Local collection on Domain Controllers is more stable than remote collection because Domain Controllers typically have a heavier event per second (EPS) rate than member servers.
Remote Collection--The WinCollect agent is installed on a single host and collects events from multiple Windows systems. Use remote collection to easily scale the number of Windows log sources that you can monitor.
System Performance and Deployment Strategies
Use the following strategies to reduce the impact to system performance:
To reduce the total number of agents, use remote collection where one agent monitors many endpoints.
If you update a group of WinCollect agents, do it during off-peak operating hours.
Deploy and manage the WinCollect agents in groups of 100 and monitor system performance for issues.