caelmagent

6789, 17001

This is the CA User Activity Reporting Module agent process.

caelmconnector

Dependent upon what it listens for, or to what it connects.

This is the CA User Activity Reporting Module connector process. There will be a separate connector process running for each connector that is configured on an agent.

caelmdispatcher

This CA User Activity Reporting Module process handles event submission and status information between the connector and agent.

caelmwatchdog

None

CA User Activity Reporting Module watchdog process that monitors other processes to ensure continuity of operations.

caelm-agentmanager

This CA User Activity Reporting Module process handles agent management tasks such as status and subscription.

caelm-alerting

This CA User Activity Reporting Module process handles alert messages sent via email, IT PAM, and SNMP trap.

caelm-correlation

This CA User Activity Reporting Module process handles correlation rules, communicating with the Correlation service when a correlation rule triggers.

caelm-eemsessionsponsor

CA EEM main process that manages all communications to CA EEM for local sponsors running under safetynet on the CA User Activity Reporting Module server.

This process may run under safetynet.

caelm-incidentservice

This CA User Activity Reporting Module process handles incident generation and logging configuration, handling information from the Correlation service when a Correlation rule triggers.

caelm-logdepot

17001

The CA User Activity Reporting Module event log store process that handles event storage, archive file creation, and other functions.

This process may run under safetynet.

caelm-queryservice

This CA User Activity Reporting Module process handles the configuration and management of queries.

caelm-reporter

This CA User Activity Reporting Module process handles configuration and management of scheduled reports, report exports, and action alerts.

caelm-ruletest

This CA User Activity Reporting Module process manages rule tests performed on an ad-hoc basis.

caelm-sapicollector

This is the SAPI collector service process.

This process may run under safetynet.

caelm-sapirouter

This is the SAPI router service process.

This process may run under safetynet.

caelm-systemstatus

This process gathers system status for display in the CA User Activity Reporting Module user interface.

This process may run under safetynet.

dxadmind

CA Directory process that runs on the server where CA EEM is installed.

dxserver

CA Directory process that runs on the server where CA EEM is installed.

igateway

5250

CA User Activity Reporting Module main process; must be running to collect and store events.

message broker

CA User Activity Reporting Module process that communicates between the agent and the CA User Activity Reporting Module server to send events.

oaserver

17002

CA User Activity Reporting Module process that runs to handle server-side processing for ODBC and JDBC requests for access to the event log store.

safetynet

CA User Activity Reporting Module process framework that runs to ensure continuity of operations.

ssld

CA Directory process that runs on the server where CA EEM is installed.