Services appear down or disabled on the Central Manager from the CLI in Security Analytics

Products

• Security Analytics

Issue/Introduction

On a Central Manager (CMC) the services dedicated to a sensor are not running.  They are disabled.  When running systemctl list-unit-files there will be services listed as disabled. These should only be services which are not used on a CMC and are expected to be marked as failed. 

Resolution

This is a sample of services which are expected to be marked as disabled on a CMC:

captured-script.service                       disabled

clamav-clamonacc.service                      disabled

clamav-freshclam.service                      disabled

[email protected]                                disabled

clamonacc.service                             disabled

console-getty.service                         disabled

console-shell.service                         disabled

[email protected]                      static 

containerd.service                            disabled

cpupower.service                              disabled