An administrator defines SMTP as a critical process on a Linux server.
It the SMTP process is stopped. FortiSIEM will generate a critical event with which event type?
Process Monitoring in FortiSIEM: FortiSIEM can monitor critical processes on managed devices, such as an SMTP process on a Linux server.
Event Generation: When a critical process stops, FortiSIEM generates an event to alert administrators.
Event Types: Specific event types correspond to different monitored conditions. For a stopped process, the event type PH_DEV_MON_PROC_STOP is used.
Reasoning: The name PH_DEV_MON_PROC_STOP (Device Monitoring Process Stop) is a generic event type used by FortiSIEM to indicate that any monitored process, including SMTP, has stopped.
Reference: FortiSIEM 6.3 User Guide, Event Types section, explains the predefined event types and their usage in different monitoring scenarios.
Dick
7 months agoLynelle
5 months agoEleonora
5 months agoFranklyn
6 months agoFernanda
6 months agoKattie
7 months agoCherri
6 months agoLorrine
6 months agoJerry
7 months agoCarli
7 months agoLorriane
7 months agoLili
7 months agoRolande
6 months agoJesus
7 months agoTesha
7 months agoCharlene
8 months agoPearline
6 months agoAndrew
7 months agoKrissy
7 months agoNieves
7 months agoRebeca
8 months agoRima
8 months agoRossana
8 months agoMatthew
7 months agoBarabara
7 months agoJolanda
7 months agoDominque
8 months ago