Correct Answer:
A, B, C
These three processes are essential for a FortiSIEM collector, as they handle event parsing, agent
communication, and system monitoring.
● phParser is responsible for parsing and processing collected logs before forwarding them.
● phAgentManager manages agent communication, ensuring logs are received and forwarded
correctly.
● phMonitorAgent monitors the health of the collector itself, reporting system status to the
FortiSIEM supervisor.
phReportMaster and phRuleMaster do not run on collectors. They are supervisor/worker processes
handling reporting and rule evaluation, respectively.