Least Privileged User: PM, Job Manager

The Job Manager runs scheduled report jobs and other background functions, such as automated list imports and heartbeat monitoring. You can schedule report packages to run and be delivered automatically using the Scheduled Report Job Manager. The Job Manager then creates, exports, notifies, and delivers the reports.

Purpose

The Job Manager is a master scheduler for LogRhythm and executes a variety of functions to keep the system operational.

The Job Manager configuration and state file directories are configurable. In addition, the report path may be moved off-server.

Shared Resources


Read

Write

Read & Execute

Modify

Full Control

Children Inherent

<LogRhythm Installation Directory Path>\LogRhythm\LogRhythm Job Manager





X


<LogRhythm Report Path>





X


Registry Access


Read Control

Write Owner

Write DAC

Delete

Create Link

Enumerate Subkeys

Set Value

Query Value

Full Control

Children Inherent

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\
services\lrjobmgr

X

X

X

X

X

X

X

X


X

HKEY_LOCAL_MACHINE\System\CurrentControlSet\
services\eventlog\Security

X

X

X

X

X

X

X

X


X

HKEY_LOCAL_MACHINE\System\CurrentControlSet\
services\eventlog\Application

X

X

X

X

X

X

X

X


X

HKEY_LOCAL_MACHINE\System\CurrentControlSet\
Services\WinSock2\Parameters

X

X

X

X

X

X

X

X


X

HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\
Microsoft\Windows NT\CurentVersion\Perflib

X

X

X

X

X

X

X

X


X

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows NT\CurrentVersion\Perflib

X

X

X

X

X

X

X



X

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\
services\.NET CLR Data

X









X

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\
services\.NET CLR Networking

X









X

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\
service\.NET CLR Networking 4.0.0.0

X









X

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\
services\.NET Data Provider for Oracle

X









X

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\
services\.NET Data Provider for SqlServer

X









X

Database Access

The Job Manager uses the LogRhythmJobMgr database user and the LogRhythmGlobalJobMgr security role to access the LogRhythm EM databases (EMDBs). All permissions are set as required by the default security role.

Ports

If the Knowledge Base updates are pulled from online (rather than locally), the Job Manager will need the following configuration.

Port

Default Port

Inbound/Outbound

Purpose

HTTP

80

Bidirectional

Access and downloading online KB updates

HTTP/SSL

443

Bidirectional

Access and downloading online KB updates over SSL

SMB

445

Bidirectional

Used for Windows file sharing

AD Sync

389, 636

Outbound

Connection to Global Catalog Server for Active Directory Sync

Other Resources

The Job Manager does not access any external third-party systems.