These three processes are essential for aFortiSIEM collector, as they handle event parsing, agent communication, and system monitoring.
●phParseris responsible forparsing and processing collected logsbefore forwarding them.
●phAgentManagermanages agent communication, ensuring logs are received and forwarded correctly.
●phMonitorAgentmonitors the health of the collector itself, reporting system status to the FortiSIEM supervisor.
phReportMasterandphRuleMasterdo not run on collectors. They are supervisor/worker processes handling reporting and rule evaluation, respectively.
Contribute your Thoughts:
Chosen Answer:
This is a voting comment (?). You can switch to a simple comment. It is better to Upvote an existing comment if you don't have anything to add.
Submit