7.25.0 7.24.0 7.23.0 7.22.0 7.21.0 7.20.0 7.19.0 7.18.0
7.25.0 7.24.0 7.23.0 7.22.0 7.21.0 7.20.0 7.19.0 7.18.0

Startup and Shutdown System Monitors on Linux

You must be logged in as an Administrator to take this action.

  • To start up System Monitors, do one of the following:

    • If the automated startup scripts were installed, the easiest way to manually start LogRhythm System Monitor Service is to use the service startup script located in
      /etc/rc.d/init.d. Type: /etc/init.d/scsm start

    • If the control scripts have not been installed, scsm can be started manually as a background process by accessing the directory containing the executable file and typing: ./scsm &.

  • To query a System Monitor status, use: /etc/init.d/scsm status

  • To shut down System Monitors, use: /etc/init.d/scsm stop

    • To avoid data loss on shutdown, it is important to always use a SIGTERM to stop the LogRhythm Linux Agent. You can do this by entering one of these commands if the service control script /etc/rc.d/init.d/scsmd is not installed. 

      • kill -s TERM <process id of scsm>

      • kill -s 15 <process id of scsm>

      • killall -s 15 scsm 6

    • Before the System Monitor Agent exits, there may be a pause as it finishes sending any log data that has been queued into memory. It is important to avoid using kill signals that cause a hard stop because there will be no way to ensure data delivery to the Data Processor.