The LogRhythm Open Collector brings modern logs, usually in JSON format, from cloud log sources, flat file, or other formats, into the LogRhythm SIEM. It is designed for easy mapping of JSON fields to the LogRhythm Schema Dictionary and Guide. The Open Collector uses Elastic Beats to grab the data from the device and pass it along to the Open Collector, where the normalization takes place.
Eventually, the System Monitor Agent will do only what the name implies—monitor a single system. LogRhythm is beginning the transition to Open Collector with popular logs for which the Open Collector's JSON-native log capabilities add a lot of value. This includes AWS, O365, and JSON logs that come in over flat file or syslog. The future of data collection is here.