📄️ Codeless Connector Framework (CCF)
Pull-type. Codeless Connector Framework poller driven by a Microsoft Sentinel PollingConfig.json file.
📄️ Datagen
Generates synthetic log traffic for pipeline testing, target connectivity validation, and load characterization.
📄️ DataStream Stats
Pull-type. Subscribes to the Director's NATS JetStream stats stream and republishes route, target, device, pipeline, resource, queue, and log-severity metrics in ECS, Cribl, or Prometheus naming.
📄️ File
Pull-type. Director-side log file collector that polls filesystem globs and forwards matched lines through an optional pipeline.
📄️ OTLP
OpenTelemetry Protocol (OTLP) listener that receives logs, metrics, and traces over gRPC and HTTP.
📄️ Proofpoint On Demand
Pull-type. WebSocket-based Proofpoint On Demand (POD) log stream consumer for email security events.
📄️ Windows Event Collector (WEC)
Windows Event Collector (WEC) server accepting WS-Man event forwarding with Kerberos/SPNEGO and TLS mutual authentication.