Data Collectors utilize remote APIs to pull real time data from the resources they are connected to. In addition a lightweight agent running inside the guest OS on these remote systems pushes data in realtime to the engine.
One of the primary tasks of the real-time engine is to correlate and associate multiple data types (metrics, configuration, logs, metadata and more) from multiple data sources and to organize them in high performance data sets that can then be consumed by the relevant presentation layer or by an external system leveraging APIs exposed by the realtime engine for that purpose.
An advanced rule evaluator which is able to instantly check and evaluate thousands of state changes in each of the many logical objects the real-time engine manages is the basis for a granular and powerful incident trigger mechanism. New triggers can be set both manually and automatically.