Audit Collector Workload

Audit collectors send audit data to the Delinea Platform, so recorded activities and events can be displayed.

Audit Collectors function as intermediary services that receive and compress real-time activities captured by agents deployed on audited computers. Additional collectors can be deployed at any point for additional resiliency or improved scale.

We recommend setting up at least two collectors to ensure uninterrupted auditing.

The agent on each audited machine captures user activities and forwards them to a designated collector. When the agent cannot establish a connection with a collector—such as when computers hosting the collector service are offline for maintenance—the agent temporarily stores the session data locally. When the connection is reestablished, the agent transfers this session data to the collector. The collector then transmits the data to the Delinea Platform.

Editing Audit Collector Settings

1. Click Settings from the left navigation menu, then click Engine Management.

2. Select a site.

3. Click the Settings tab.

4. Click Edit.

5. Enable or disable Session Recordings to Platform, or change the port number.

Setting	Description
Send Session Recordings to Platform	When enabled, session recordings are sent from the collector to the platform for analysis and storage.
Port Number	5063 TCP is used by default.