The Event Log Manager consists of two services - System Event Log Manager and Security Event Log Manager. These two services share their behavior and are shipped as a single jar file - all the differences in functionality are achieved through configuration files. Note that the collection of events involves a running process, therefore, with core layer down no system events are collected and with base layer down no security events are collected.