Sentinel leverages ArcSight SmartConnectors that help you monitor your enterprise network by collecting IP Flow data. SmartConnectors collect IP Flow data as events, which allow you to:
Use existing Collector Managers to collect IP Flow data.
Leverage IP Flow data in several areas of Sentinel such as visualizations, event routing, data federation, reports, and correlation.
Apply data retention policies to IP Flow data, which allows you to store this data for the desired duration.
To configure IP Flow data collection, you must install and configure the ArcSight SmartConnector. While configuring, ensure that you configure the relevant SmartConnectors that collect IP Flow data.
For information about configuring SmartConnectors, see the Generic Universal CEF Collector documentation on the Sentinel Plug-ins Website.