Number of collectors' connection to the MOM greater than two between 11:59pm - 12:01am each day. Uploading the em.log files. Trying to identify what's causing this issue.
Release : 10.7.0
Found that someone on the customer side set up CLW commands to run automatically. Customer to look into who created them and why.
This is the user I see every night around 12 AM. Also I see the same user running CLW commands at 2 AM, 4 AM, 5 AM, 8 AM, etc....
[INFO] [PO:main Mailman 8] [Manager.SessionBean] Command Line Work Station User "cemadmin" connected successfully from host "Node=Workstation_8011, Address=myserver.com/220.127.116.11:5001, Type=socket"