Kaspersky Machine Learning for Anomaly Detection

Starting, stopping, and restarting services

Kaspersky MLAD lets you start, stop and restart services.

System administrators and users who have the Manage statuses of application services permission from the Working with application services group of rights can start, stop, and restart services. Management of service statuses under Data processing becomes available after adding a license key.

Service statuses cannot be managed under Main in the Kaspersky MLAD web interface.

Under Services, you can manage the statuses of the following services:

• Anomaly Detector. This service must be enabled and configured if you need to analyze telemetry data and detect anomalies in the behavior of the monitored asset.
• Trainer. This service must be enabled if you need to train ML model elements on telemetry data.
• Similar Anomaly. This service must be enabled and configured if you need to group similar incidents.
• Event Processor. This service must be enabled and configured if you need to detect patterns and abnormal sequences of events.
• Stream Processor. This service must be enabled and configured if you need to convert telemetry data to a uniform temporal grid and log incidents when data loss is detected and data arrives too soon or too late.
• HTTP Connector. This connector must be enabled and configured if you need to receive telemetry data over HTTP or HTTPS.
• OPC UA Connector. This connector must be enabled and configured if you need to receive telemetry data over OPC UA.
• AMQP Connector. This connector must be enabled and configured if you need to receive telemetry data and incident registration messages over AMQP.
• KICS Connector. This connector must be enabled and configured if you need to receive telemetry data from Kaspersky Industrial CyberSecurity for Networks.
• MQTT Connector. This connector must be enabled and configured if you need to receive telemetry data and incident registration messages over MQTT.
• CEF Connector. This connector must be enabled and configured if you need to receive telemetry data and incident registration messages via CEF.
• WebSocket Connector. This connector must be enabled and configured if you need to receive telemetry data and incident registration messages over WebSocket.
• Mail Notifier. This service must be enabled and configured if you need to send registered incident alerts by email.
• Logger. This service must be enabled if you need to maintain and store Kaspersky MLAD logs. This service is enabled by default.

To start, stop, or restart a service:

1. In the main menu, select the Services section.
2. On the opened page, select one of the following subsections: Data processing, Connectors, or Other.
3. Do one of the following for the relevant service:
   • If you want to start a service, click .
   • If you want to stop a service, click .
   • If you want to restart a service, click .

   The new status of the service is displayed in the Status column.