APPENDIX 2: Job Descriptions for Job Scheduler

job name description aapmtriggerprocessjob aapm triggers awsdeviceimportjob creating aws device import jobs docid zepqoq7bkmql8plprbk7 azuredeviceimportjob creating azure device import jobs docid\ bdhkdfy7gnrhmtlsxhlkm backupdeletejob deletes db backup files older than one day from folders that are configured with the following system parameters · aioc backup uploaddir · aioc backup tempdir these files are stored temporarily to upload to the ftp server, this is a cleaning job for failed uploads bulkmailjob this job sends bulk mails (user group change, black key, and white key execution notifications) cloudcollectordiscoveryjob this job collects data from cloud service providers (e g , aws, azure, gcp) and presents them under different formats in ciem screens deviceautodiscover this job executes scheduled auto device discovery tasks devicedatabaseimportjob enable external device database import job docid\ wczvsp4tqfqfdbr4lfljm deviceoperationmodecheck checks devices' maintenance mode definitions and marks devices as maintenance or operation modes so that ssh proxy applies policies according to device’s mode and selects the policy group accordingly gcpdeviceimportjob creating gcp device import jobs docid 5gccqhapcglc7bo5spqdi idlesessiondeletion this is a job enabled by default and used for closing the sessions that passed the idle session timeout thresholds ldapdatacollector this job adds ad users automatically based on ldap configurations if the pam server is multi tenant environment, and if this job is executed on the access on behalf enabled tenant environment, both host’s and the tenant’s ldap configurations are used, whereas if this job is executed on the host environment, only host’s ldap configurations are used adding users automatically docid\ f3nmygjw5kbsemq4hr25w ldapdeviceimportjob adding devices automatically docid\ juql2grtu2ikwszy5mhok linuxauditjob linux audit report docid\ isfzla6cumvp0a2arsrfr logretentionjob deletes tenant’s logs older than the value defined for the logretentiondays system parameter for each tenant mailsender this is a job enabled by default and used for sending email notifications for several purposes mfatokenemailsendjob sending mfa qr code to users docid\ ljpie1 hzi7azj6fnoq5m sapm newusercheckjob editing new user check cronjob docid 4a0xrs5byx8a4r3wyhs2o sapm passwordchangejob the job rotates the passwords of the accounts that are due to be changed runs once per minute by default sapm passwordchangereminderjob the job that sends mail to the user before the password change period based on the password change reminder day parameter in the vault configuration sapm passwordcheckjob the job checks the validity of the passwords of the accounts periodically sapm passwordreservationjob future date reservation docid\ miajsfbgvb1ypv24uqapt sc ocrprocessjob this is a job enabled by default and used for capturing the on screen characters in rdp/vnc sessions scmonitoringcreatealarmjob creates alarms according to alarm definitions and diagnostic values scmonitoringdeletealarmjob deletes closed alarms older than six months scpolicynotifierjob sends notifications about executed commands in ssh proxy, sends command and connection approval notifications enabling push notifications for mobile application docid\ jool0efi7f6vcey ig0rc scsessionalertsjob legacy threat analytics scsessionstatisticsjob legacy threat analytics sddschedule schedule discovery docid\ iz7dvqgx7yf1oomkfbzxu sendpushmessagejob enabling push notifications for mobile application servicenow ticket control retrieves suitable service now tickets and runs matched workflows (used only with service now ticketing system integration) supersetreportschedulejob sends scheduled reports on reporting module tamperprooflogjob seals old log records and the log records created by tacacs or other applications tenantcleanjob this job automatically scans and completely deletes the removed tenants from the web gui once the tenant is removed from the web gui,“is deleted” valueof the tenant is set to yes, and “deletion time” is set to "now" tenantcleanjob checks if there are any tenants whose deletion time has passed by 2 months, and if there are, it completely removes that tenant (both from t tenant and from its schema) tunnelheartbeatcheckjob this job keeps track of the regular heartbeat messages sent by the connector nodes and sets the tunnel status as failed in case three consecutive heartbeat messages (this number is specified in the “connector heartbeat check interval” system parameter) do not arrive there will be no traffic on the failed tenant connector node unless its status turns active again tunnelsetupjob this job copies the newly defined outbound connector node to all other tenants and replicated environments user eligibility check checks local users to lock inactive users and expired temporary users, unlock temporarily locked/suspended users, and mark users with expired passwords user notification before lock notifying inactive users before lock docid 8aot1ta9jvf1japgixnhy windowsauditjob windows audit report docid\ ovjyyatn4lqeb2we54wgq workflowscheduler executes scheduled workflows in privileged task automation manager module sessionvideoconverterjob this job automatically converts session recordings to video on a scheduled basis epm riskscorejob retrieves the risk scores from virustotal for epm discovered applications check details on agent reference guide epm devicecountjob device counts on application catalog page check details on agent reference guide epm rulesjob calculates hash value of the rules