Skip to main content
Skip table of contents

Startup and Shutdown System Monitors on Linux

You must be logged in as an Administrator to take this action.

  • To start up System Monitors, do one of the following:
    • If the automated startup scripts were installed, the easiest way to manually start LogRhythm System Monitor Service is to use the service startup script located in
      /etc/rc.d/init.d. Type: /etc/init.d/scsm start
    • If the control scripts have not been installed, scsm can be started manually as a background process by accessing the directory containing the executable file and typing: ./scsm &.
  • To query a System Monitor status, use: /etc/init.d/scsm status
  • To shut down System Monitors, use: /etc/init.d/scsm stop
    • To avoid data loss on shutdown, it is important to always use a SIGTERM to stop the LogRhythm Linux Agent. You can do this by entering one of these commands if the service control script /etc/rc.d/init.d/scsmd is not installed. 
      • kill -s TERM <process id of scsm>
      • kill -s 15 <process id of scsm>
      • killall -s 15 scsm 6
    • Before the System Monitor Agent exits, there may be a pause as it finishes sending any log data that has been queued into memory. It is important to avoid using kill signals that cause a hard stop because there will be no way to ensure data delivery to the Data Processor.
JavaScript errors detected

Please note, these errors can depend on your browser setup.

If this problem persists, please contact our support.