Glossary: Security Monitoring and Automation

collector

Also written: flow collector

The server that receives flow records from an exporter and stores them. In the lab it is nfcapd on siem, listening on UDP 2055; in agentless monitoring, the collector is the server that queries the devices.