Sangfor Community»Categories Products Endpoint Secure Remove Duplicate Entries in Endpoint Secure Console

Remove Duplicate Entries in Endpoint Secure Console

views: 1590 | comments: 2 | added to Favorites 0
Lights on | 提示:支持键盘翻页<-左 右->
    组图打开中,请稍候......
Created: 2024-Sep-06 14:54

Summary:

i install es agent on vm then i disable that agent from console, after that i reinstall the OS again and deploy fresh agent, now it is showing two entries and when i try to delete the old entry it's n ...

Reply

Zonger Posted 2024-Sep-06 18:03
It is due to the fact that the previous disabled agent is still registered in the Elastic Stack's index even after reinstalling the OS and deploying a fresh agent. You need to use the Elasticsearch APIs to remove the old, disabled agent from the index.

It can be done by using the `es-agent-remover` tool, which is included with Elasticsearch. Run the following command on your Elasticsearch node: `es-agent-remover --agent-ids <old-agent-id>`, replacing `<old-agent-id>` with the actual ID of the old agent. This will remove the old agent from the index, allowing you to safely delete it from the console.

You can also use the Elasticsearch API directly by sending a DELETE request to `/_admin/agents/<old-agent-id>`, replacing `<old-agent-id>` with the actual ID of the old agent.
fuadmahbubun Posted 2024-Sep-06 14:58
Hi, you cannot remove disabled Agent. so you have to open ticket to your sangfor support on your country, then they will help you to remove on system backend.