Event Store and Forward

Use the Store and Forward feature to manage schedules for forwarding events from your dedicated Event Collector appliances to Event Processor components in your deployment.

The Store and Forward feature is supported on the Event Collector 1501 and Event Collector 1590. For more information about these appliances, see the Juniper Secure Analytics Hardware Guide.

A dedicated Event Collector does not process events and it does not include an on-board Event Processor. By default, a dedicated Event Collector continuously forwards events to an Event Processor that is connected to JSA.

You can schedule a time range for when you want the Event Collector to forward events to the Event Processor. By forwarding the events during non-business hours, you can ensure that the transmission does not negatively affect your network bandwidth. When event forwarding is scheduled, the events are stored locally on the Event Collector until the forwarding schedule kicks in. During this time, you cannot view the events in the JSA Console.