Startup and Shutdown System Monitors on Linux

You must be logged in as an Administrator to take this action.

  • To start up System Monitors, do one of the following:

    • If the automated startup scripts were installed, the easiest way to manually start LogRhythm System Monitor Service is to use the service startup script located in
      /etc/rc.d/init.d. Type: /etc/init.d/scsm start

    • If the control scripts have not been installed, scsm can be started manually as a background process by accessing the directory containing the executable file and typing: ./scsm &.

  • To query a System Monitor status, use: /etc/init.d/scsm status

  • To shut down System Monitors, use: /etc/init.d/scsm stop

    • To avoid data loss on shutdown, it is important to always use a SIGTERM to stop the LogRhythm Linux Agent. You can do this by entering one of these commands if the service control script /etc/rc.d/init.d/scsmd is not installed. 

      • kill -s TERM <process id of scsm>

      • kill -s 15 <process id of scsm>

      • killall -s 15 scsm 6

    • Before the System Monitor Agent exits, there may be a pause as it finishes sending any log data that has been queued into memory. It is important to avoid using kill signals that cause a hard stop because there will be no way to ensure data delivery to the Data Processor.