You can control individual services with the so-<component>-<verb>
scripts. You can see a list of all of these scripts with the following command:
ls /usr/sbin/so-*
The following examples are for :ref:`zeek`, but you could substitute whatever service you're trying to control (:ref:`logstash`, :ref:`elasticsearch`, etc.).
Start :ref:`zeek`:
sudo so-zeek-start
Stop :ref:`zeek`:
sudo so-zeek-stop
Restart :ref:`zeek`:
sudo so-zeek-restart