We are running nightly scans on our Linux servers. The table Running Processes [cmdb_running_process] is of interest for config audit and diagnostics. From one scan to the next, suppose a process is restarted and returns with a new PID - is a new running process record created and the old one deleted? Is the original record updated? Same questions if a parameter is changed ... If there is no change to PID & parameters on a scan, is the running process record updated? What determines when/if a running process record is deleted? I haven't found anything in the docs on this. Flowchart or pseudocode would help!
We have similar questions for discovered applications, but I'm going to put them under a separate topic.
