The Infoblox Data Connector is a utility designed to collect DNS query and response data and security logs from specified sources. It transfers the collected data to defined destinations such as the BloxOne Threat Defense Cloud, Infoblox NIOS reporting server, and generic syslog. The Data Connector supports integrations with Splunk using the Splunk forwarder and generic syslog with CEF or LEEF message format.
You can deploy multiple Data Connectors to balance the load and optimize data transfer to Infoblox NIOS Reporting. Note that NIOS version 8.5.0 or higher is required.
The original Data Connector, which is not managed by the Infoblox Cloud, is now known as the Legacy Data Connector. For information about the Legacy Data Connector, see Legacy Data Connector.
The Data Connector filters source data based on user criteria (thus reducing data quantity) and converts the data to a format that can be securely transferred to and easily consumed by supported destinations. It acts as a central point for data collection across your network devices, which reduces the impact of data exchange and improves your Grid performance.
The following illustration describes the basic concept of the data collection process, which includes collecting supported data from NIOS or BloxOne Threat Defense Cloud, filtering and storing the data, and sending the data to the supported destinations.
draw.io Diagram border true viewerToolbar true fitWindow false diagramName CDC Process simpleViewer false diagramWidth 771 revision 1
Note the following: