About agents

KUMA agents are services that are used to forward raw events from servers and workstations to KUMA destinations.

The following types of agents are provided:

wmi agents are used to receive data from remote Windows devices using Windows Management Instrumentation. These are installed on Windows devices.
wec agents are used to receive Windows logs from a local device using Windows Event Collector. They are installed to Windows assets.
tcp agents receive data over TCP. These are installed on Linux and Windows devices.
udp agents receive data over UDP. They are installed to Linux and Windows assets.
nats-jetstream—used for NATS communications. They are installed to Linux and Windows assets.
kafka agents are used for kafka communications. They are installed to Linux and Windows assets.
http agents are used for communication over HTTP. They are installed to Linux and Windows assets.
file agents get data from a file. They are installed to Linux and Windows assets.
ftp agents receive data over the File Transfer Protocol. They are installed to Linux and Windows assets.
nfs agents receive data over the Network File System protocol. They are installed to Linux and Windows assets.
snmp agents receive data using the Simple Network Management Protocol. They are installed to Linux and Windows assets.
diode agents are used together with data diodes to receive events from isolated network segments. They are installed to Linux and Windows assets.
etw agents receive Event Tracing for Windows data. They are installed to Windows assets.