Run the User Profile SmartResponse to Fix a Failed Update

Only Global Admins or Restricted Admins with elevated View and Manage privileges can take this action.

If the System Monitor Agent update fails, complete the following steps.

1. On the agent machine, access the Services panel and look for the LogRhythm System Monitor service.
2. Look in the Log On As column and verify that agent is set to run as a named user.
3. Access the LogRhythm Community.
4. In the top menu, click Shareables, SmartResponses, View more articles, and then download the Load User Profile SmartResponse.

5. Import the SmartResponse. 

   

   Instructions are available on the Import SmartResponse Plugins page in the Enterprise SIEM section of the LogRhythm Documentation site.

6. In the Client Console, click Deployment Manager, System Monitors, and then select the Action check box of the agent you want to update.
7. Right-click the agent, click Action, and then click Initiate SmartResponse.
8. In the Action menu, select Load User Profile.
9. Enter the Username, Domain, and Password for the named user in the Services panel.
10. Click OK and wait for the SmartResponse to execute.
11. After the SmartResponse has executed successfully, update the agent following the instructions in this guide.