User Guide

Overview

Tornado provides a number of preconfigured Collectors that handle inputs from various data sources:

  1. Email Collector

  2. Rsyslog Collector

  3. Webhook Collector

  4. Nats JSON Collector

  5. Icinga 2 Collector

  6. SNMP Trap Daemon Collector

  7. SMS Collector

Most of the Tornado Collectors are functioning out of the box and do not require manual configuration. However, there are some, that may be configured to work in accordance with your needs.

The Event Type

All collectors convert the external events they collect to Tornado internal events that are then forwarded to the Tornado Processing Engine. These events share a similar base structure, but every collector adds their own data to the event payload and sets a custom event type. An event consists of the following properties:

Property

Type

Description

type

String

The type/source, of the event. Dependend on the collector that creates the event

created_ms

Integer

A timestamp in milliseconds, when the collector created the event

payload

Object

A JSON object that contains all the data for the event

metadata (Optional)

EventMetadata

Metadata for the event

Note

The Tornado iterator node can also add a new field iterator to the event, which is only present in the processing tree for the children of an iterator node.

EventMetadata

Property

Type

Description

tenant_id (Optional)

String

If the event is received over Nats, the Tornado collector will set this field, dependend on the sender.