Agents and Mediators much be shut down in the proper order to prevent data loss. First, the Agents should be shut down and then the Mediator/Data Processor.
- On the Agent machine, access the Services panel and stop the LogRhythm System Monitor service.
- Copy the .ini file from the saved location above to the Unidirectional Agent machine.
- Place the file in the C:\Program Files\LogRhythm\LogRhythm System Monitor\config directory and choose to Replace the current scsm.ini file.
- Start the LogRhythm System Monitor service.