The System Monitor Configuration Policy Manager provides LogRhythm administrators policy-based management of Agents. A LogRhythm Administrator creates a System Monitor Configuration Policy and then applies the policy to multiple Agents. The policy determines how the Data Processor processes logs sent from the Agents.
When an Agent has a System Monitor Configuration Policy applied to it, the Agent's configuration is locked. The policy applied to the Agent must be updated to change the Agent’s configuration. By locking down the Agent’s configuration, the LogRhythm Administrator can easily control the configuration of many Agents over large geographic locations.