Remove Agent from Server

16,946 views
Skip to first unread message

Nakova Technologies

unread,
Jan 19, 2023, 1:15:23 AM1/19/23
to wa...@googlegroups.com
Hi Team,

One of our customer is not responding. We need to remove  the Agent from Wazuh Server. We have used below link to remove the Agent 


But the agent re-appears after an hour or so.

Please let us know how to remove the agent permanently from the Wazuh Server.

Thanks
Sharo

Okonkwo Uju

unread,
Jan 19, 2023, 1:57:25 AM1/19/23
to Nakova Technologies, wa...@googlegroups.com
Hello, 

Thank you for using Wazuh.

Give me a moment to assist you with a useful link.

--
You received this message because you are subscribed to the Google Groups "Wazuh mailing list" group.
To unsubscribe from this group and stop receiving emails from it, send an email to wazuh+un...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/wazuh/CADue4bHN_Bh4tJk9JobCjteAz%3DXtibmwDgJpUw1iyQcHqiSpXg%40mail.gmail.com.

Ujunwa Okonkwo

unread,
Jan 19, 2023, 2:20:00 AM1/19/23
to Wazuh mailing list
Hello,

There are two different ways to remove agents from the Wazuh Manager. Please refer to these documentations:

1. Remove agents using the CLI: https://documentation.wazuh.com/current/user-manual/agents/remove-agents/remove.html

2. Remove agents using the Wazuh API: https://documentation.wazuh.com/current/user-manual/agents/remove-agents/restful-api-remove.html
This is a more user-friendly solution, using the WUI. For this you must log in to the Wazuh WUI and go to the menu: Wazuh -> Tools -> API Console.
Within the menu you should execute a request to remove the agent.

Please I hope this is helpful.

Regards,

Sharo V

unread,
Jan 19, 2023, 2:57:30 AM1/19/23
to Wazuh mailing list
We have used the above links but the agent appears after an hour in the Wazuh.

We want to permanently remove the agent.

Thanks

Ujunwa Okonkwo

unread,
Jan 19, 2023, 3:16:16 AM1/19/23
to Wazuh mailing list
Hello Sharo,

My advice would be to either stop or disable Wazuh agents from the respective agents' environments or totally uninstall Wazuh from the agents;

Depending on the type of Operating system your Wazuh Agent is running, please refer to the respective documentations for uninstally Wazuh agents;

LinuX:  https://documentation.wazuh.com/current/installation-guide/wazuh-agent/wazuh-agent-package-linux.html#uninstall-a-wazuh-agent
Windows: https://documentation.wazuh.com/current/installation-guide/wazuh-agent/wazuh-agent-package-windows.html#uninstall-a-wazuh-agent
MAC OS: https://documentation.wazuh.com/current/installation-guide/wazuh-agent/wazuh-agent-package-macos.html#uninstall-a-wazuh-agent
Oracle Solaris: https://documentation.wazuh.com/current/installation-guide/wazuh-agent/wazuh-agent-package-solaris.html#uninstall-a-wazuh-agent


Please I hope this is helpful.

Regards,
 

Sharo V

unread,
Jan 19, 2023, 3:50:54 AM1/19/23
to Wazuh mailing list
Ok.

But the problem is, I am having unresponsive customer. Wazuh should have option to remove agents from server itself.

Thanks

Okonkwo Uju

unread,
Jan 19, 2023, 5:50:32 AM1/19/23
to Sharo V, Wazuh mailing list

This is a more user-friendly solution, using the WUI. For this you must log in to the Wazuh WUI and go to the menu: Wazuh -> Tools -> API Console.
Within the menu you should execute a request to remove the agent. 
Reply all
Reply to author
Forward
0 new messages