Security Compliance

How to verify SEM agent service and port status

This article provides steps on how to verify SEM (formerly LEM) agent service and port status on Linux & Windows agent nodes.

First published date

9/18/2021 11:45 AM

Last published date

6/6/2023 9:54 PM

Overview

This article provides steps on how to verify SEM agent service status and port status of Linux and Windows agent nodes for Security Event Manager - SEM (formerly Log & Event Manager - LEM).

Product section

Security Event Manager

Resolution

One you Solarwinds Agent software installed, you can use below commands to check agent and port 3789* status on most flavors of Unix and Windows. For any other OS related queries for *nix, you need to work with your Linux administrator. 

1) Ubuntu/CentOS:
a) Service Status: 
# service swlem-agent status or 

# systemctl | grep swlem-agent

b) Port status  
# netstat | grep 3789* 

tcp6 0 418 sem-ubuntu:39111 <SEM IP>:37892 ESTABLISHED 
tcp6 0 0 sem-ubuntu:49359 <SEM IP>:37891 ESTABLISHED
2) Windows OS:
a) Service Status:
  • Windows key + R to open the Run dialog box.
  • Type services.msc
  • Scroll through the list or use the search bar to locate the specific service you want to check.
b) Port status 
 
C:\> netstat -a -n | findstr :3789*

  TCP    10.10.10.1:55106      10.10.10.2:37891       TIME_WAIT
  TCP    10.10.10.1:55107      10.10.10.2:37892       TIME_WAIT
  TCP    10.10.10.1:55108      10.10.10.2:37890       ESTABLISHED