A.1 Pods for the Deployed Capabilities

The following pods support the functionality of ESM for Fusion, Fusion, and Layered Analytics. Each pod corresponds to a specific label that you apply to the nodes working with the pod.

Pod Name

Description

Deployed with

Label

common-doc-web-app

Contains the Help files for the Fusion features and the REST APIs

Fusion

fusion:yes

dashboard-metadata-web-app

Contains the Dashboard metadata of the REST API

Fusion

fusion:yes

dashboard-web-app

Manages the uer interface for the Dashboard

Fusion

fusion:yes

database-monitoring-web-app

Contains the REST API for database monitoring

When this pod starts up, it also installs the Health and Performance Monitoring dashboard, as well as the widgets that are in that dashboard

Fusion

fusion:yes

hercules-common-services

Supports the core services, such as the navigation menu capability

Fusion

fusion:yes

hercules-management

Supports the user account and role management, authentication, for the Fusion user interface and the user interfaces that integrate with it. User and role data is stored within an embedded H2 database. Note: This is a separate user population than CDF Management Portal UI, which uses "idm" pod.

Fusion

fusion:yes

hercules-osp

Supports the single sign-on service and authentication

Fusion

fusion:yes

hercules-rethinkDB

Supports the RethinkDB database, which stores user configuration and preference information, such as a user's dashboards and favorites

Fusion

fusion:yes

hercules-search-engine

Provides APIs to access data in database

Fusion

fusion:yes

layered-analytics-widgets

Supports the out-of-the-box widgets and dashboard that blend data from two or more deployed capabilities

When this pod starts up, it installs the Entity Priority dashboard and the Active List widget, which connects to an ESM Manager server running outside of the Kubernetes cluster

ArcSight Layered Analytics

fusion:yes

esm-widgets

Supports the out-of-the-box widgets and dashboards for ESM case management activities

When this pod starts up, it installs the How is my SOC running? dashboard and the related widgets, which connect to an ESM Manager server running outside of the Kubernetes cluster

ArcSight ESM Command Center

fusion:yes

esm-acc-web-app

Manages the interface for the ESM Command Center console, which connects to an ESM Manager server running outside of the Kubernetes cluster

ArcSight ESM Command Center

fusion:yes