Agents and Mediators much be shut down in the proper order to prevent data loss. First, the Agents should be shut down and then the Mediator/Data Processor.
-
On the Agent machine, access the Services panel and stop the LogRhythm System Monitor service.
-
Copy the .ini file from the saved location above to the Unidirectional Agent machine.
-
Place the file in the C:\Program Files\LogRhythm\LogRhythm System Monitor\config directory and choose to Replace the current scsm.ini file.
-
Start the LogRhythm System Monitor service.