Previous Topic: Default Port Assignments

Next Topic: OS Hardening

List of Related Processes

The following table represents a list of the processes that run as part of a CA Enterprise Log Manager implementation. The list does not include system processes related to the underlying operating system.

Process Name

Default Port

Description

caelmagent

6789, 17001

This is the CA Enterprise Log Manager agent process.

caelmconnector

Dependent upon what it listens for, or to what it connects.

This is the CA Enterprise Log Manager connector process. There will be a separate connector process running for each connector that is configured on an agent.

caelmdispatcher

 

This CA Enterprise Log Manager process handles event submission and status information between the connector and agent.

caelmwatchdog

None

CA Enterprise Log Manager watchdog process that monitors other processes to ensure continuity of operations.

caelm-agentmanager

 

This CA Enterprise Log Manager process handles agent management tasks such as status and subscription.

caelm-alerting

 

This CA Enterprise Log Manager process handles alert messages sent via email, IT PAM, and SNMP trap.

caelm-correlation

 

This CA Enterprise Log Manager process handles correlation rules, communicating with the Correlation service when a correlation rule triggers.

caelm-eemsessionsponsor

 

CA EEM main process that manages all communications to CA EEM for local sponsors running under safetynet on the CA Enterprise Log Manager server.

This process may run under safetynet.

caelm-incidentservice

 

This CA Enterprise Log Manager process handles incident generation and logging configuration, handling information from the Correlation service when a Correlation rule triggers.

caelm-logdepot

17001

The CA Enterprise Log Manager event log store process that handles event storage, archive file creation, and other functions.

This process may run under safetynet.

caelm-queryservice

 

This CA Enterprise Log Manager process handles the configuration and management of queries.

caelm-reporter

 

This CA Enterprise Log Manager process handles configuration and management of scheduled reports, report exports, and action alerts.

caelm-ruletest

 

This CA Enterprise Log Manager process manages rule tests performed on an ad-hoc basis.

caelm-sapicollector

 

This is the SAPI collector service process.

This process may run under safetynet.

caelm-sapirouter

 

This is the SAPI router service process.

This process may run under safetynet.

caelm-systemstatus

 

This process gathers system status for display in the CA Enterprise Log Manager user interface.

This process may run under safetynet.

dxadmind

 

CA Directory process that runs on the server where CA EEM is installed.

dxserver

 

CA Directory process that runs on the server where CA EEM is installed.

igateway

5250

CA Enterprise Log Manager main process; must be running to collect and store events.

message broker

 

CA Enterprise Log Manager process that communicates between the agent and the CA Enterprise Log Manager server to send events.

oaserver

17002

CA Enterprise Log Manager process that runs to handle server-side processing for ODBC and JDBC requests for access to the event log store.

safetynet

 

CA Enterprise Log Manager process framework that runs to ensure continuity of operations.

ssld

 

CA Directory process that runs on the server where CA EEM is installed.