Startup and Shutdown System Monitors on Linux
You must be logged in as an Administrator to take this action.
- To start up System Monitors, do one of the following:
- If the automated startup scripts were installed, the easiest way to manually start LogRhythm System Monitor Service is to use the service startup script located in
/etc/rc.d/init.d. Type: /etc/init.d/scsm start - If the control scripts have not been installed, scsm can be started manually as a background process by accessing the directory containing the executable file and typing: ./scsm &.
- If the automated startup scripts were installed, the easiest way to manually start LogRhythm System Monitor Service is to use the service startup script located in
- To query a System Monitor status, use: /etc/init.d/scsm status
- To shut down System Monitors, use: /etc/init.d/scsm stop
- To avoid data loss on shutdown, it is important to always use a SIGTERM to stop the LogRhythm Linux Agent. You can do this by entering one of these commands if the service control script /etc/rc.d/init.d/scsmd is not installed.
- kill -s TERM <process id of scsm>
- kill -s 15 <process id of scsm>
- killall -s 15 scsm 6
- Before the System Monitor Agent exits, there may be a pause as it finishes sending any log data that has been queued into memory. It is important to avoid using kill signals that cause a hard stop because there will be no way to ensure data delivery to the Data Processor.
- To avoid data loss on shutdown, it is important to always use a SIGTERM to stop the LogRhythm Linux Agent. You can do this by entering one of these commands if the service control script /etc/rc.d/init.d/scsmd is not installed.