An administrator defines SMTP as a critical process on a Linux server.
It the SMTP process is stopped. FortiSIEM will generate a critical event with which event type?
Process Monitoring in FortiSIEM: FortiSIEM can monitor critical processes on managed devices, such as an SMTP process on a Linux server.
Event Generation: When a critical process stops, FortiSIEM generates an event to alert administrators.
Event Types: Specific event types correspond to different monitored conditions. For a stopped process, the event type PH_DEV_MON_PROC_STOP is used.
Reasoning: The name PH_DEV_MON_PROC_STOP (Device Monitoring Process Stop) is a generic event type used by FortiSIEM to indicate that any monitored process, including SMTP, has stopped.
Reference: FortiSIEM 6.3 User Guide, Event Types section, explains the predefined event types and their usage in different monitoring scenarios.
Dick
3 months agoLynelle
2 months agoEleonora
2 months agoFranklyn
2 months agoFernanda
2 months agoKattie
4 months agoCherri
3 months agoLorrine
3 months agoJerry
3 months agoCarli
3 months agoLorriane
4 months agoLili
4 months agoRolande
3 months agoJesus
3 months agoTesha
4 months agoCharlene
4 months agoPearline
3 months agoAndrew
3 months agoKrissy
3 months agoNieves
4 months agoRebeca
4 months agoRima
4 months agoRossana
4 months agoMatthew
4 months agoBarabara
4 months agoJolanda
4 months agoDominque
4 months ago