Collect Matching Files from Many Devices When the Previous Transfer Ends

Overview

Collect only the files that meet your selection rule from multiple source devices, starting when the preceding transfer ends. Matching criteria narrow what is gathered, so the destination receives a filtered set rather than everything available on each device.

Key components

• Multiple source devices
• Collection destination
• Matching criteria (file selection rule)
• Completion-based trigger (after previous transfer)

How it fits your workflow

Use this solution when devices hold far more than you want to gather and collection has to wait for an earlier transfer to finish. The selection rule keeps irrelevant files out of the collection destination.

Common use cases

• Collect only error logs from a fleet of endpoints
• Gather files for a single date range after an upstream transfer
• Pick up report files by name pattern from each device
• Retrieve only new evidence files from investigation machines