Content Comparison

Online

The registered process is running.

Terminate an ongoing process by sending the termination signal (TerminateProcess) to it.

It periodically monitors whether the process runs in the memory.
It does not check the internal operation status of the process or whether a normal response is received.
For the monitoring purpose, the operational status is checked by using the process name that includes the absolute path and the process ID (PID).

Offline

The registered process is terminated.

In the attributes of process, run the program designated in the Path.
Path attribute is the absolute path for a program existing on the system.

For instance, if you configure the program that uses the 'notepad.exe readme.txt' command as a process agent, you can express it as follows.
"Path": "c: \windows\system32\notepad.exe" "Arguments": "readme.txt"

It periodically monitors whether the process runs in the memory.
It does not check the internal operation status of the process or whether a normal response is received. For the monitoring purpose, the operational status is checked by using the process name that includes the absolute path and the process ID (PID).

Trouble

When the online process is switched to offline without using the agent termination command, it is defined as the trouble state.

In the attributes of process, run the program designated in the Path.
Path attribute is the absolute path for a program existing on the system.

For instance, if you configure the program that uses the 'notepad.exe readme.txt' command as a process agent, you can express it as follows.
"Path": "c: \windows\system32\notepad.exe" "Arguments": "readme.txt"