Skip to content

Commit

Permalink
[8.x] Document ways to provide multiple Agent uninstall tokens (backp…
Browse files Browse the repository at this point in the history
…ort #6300) (#6350)

* Document ways to provide multiple Agent uninstall tokens (#6300)

* Document ways to provide multiple Agent uninstall tokens

* Apply suggestions from code review

Co-authored-by: Benjamin Ironside Goldstein <[email protected]>

---------

Co-authored-by: Benjamin Ironside Goldstein <[email protected]>
(cherry picked from commit 87e3acb)

# Conflicts:
#	docs/serverless/edr-install-config/agent-tamper-protection.asciidoc
#	docs/serverless/edr-install-config/uninstall-agent.asciidoc

* Delete docs/serverless directory and its contents

---------

Co-authored-by: natasha-moore-elastic <[email protected]>
Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>
  • Loading branch information
3 people authored Dec 17, 2024
1 parent b72efc1 commit eb058bb
Show file tree
Hide file tree
Showing 2 changed files with 32 additions and 1 deletion.
2 changes: 2 additions & 0 deletions docs/getting-started/agent-tamper-protection.asciidoc
Original file line number Diff line number Diff line change
Expand Up @@ -48,3 +48,5 @@ If you need the uninstall token to remove {agent} from an endpoint, you can find

** Click the *Show token* icon in the *Token* column to reveal a specific token.
** Click the *View uninstall command* icon in the *Actions* column to open the *Uninstall agent* flyout, containing the full uninstall command with the token.

TIP: If you have many tamper-protected {agent} policies, you may want to <<multiple-uninstall-tokens>> in a single command.
31 changes: 30 additions & 1 deletion docs/getting-started/uninstall-agent.asciidoc
Original file line number Diff line number Diff line change
Expand Up @@ -5,14 +5,43 @@ To uninstall {agent} from a host, run the `uninstall` command from the directory

If <<agent-tamper-protection,Agent tamper protection>> is enabled on the Agent policy for the host, you'll need to include the uninstall token in the command, using the `--uninstall-token` flag. You can <<fleet-uninstall-tokens,find the uninstall token>> on the Agent policy. Alternatively, find *{fleet}* in the navigation menu or by using the {kibana-ref}/introduction.html#kibana-navigation-search[global search field], and select *Uninstall tokens*.


For example, to uninstall {agent} on a macOS or Linux host:

[source,shell]
----------------------------------
sudo elastic-agent uninstall --uninstall-token 12345678901234567890123456789012
----------------------------------

[discrete]
[[multiple-uninstall-tokens]]
== Provide multiple uninstall tokens

If you have multiple tamper-protected {agent} policies, you may want to provide multiple uninstall tokens in a single command. There are two ways to do this:

* The `--uninstall-token` command can receive multiple uninstall tokens separated by a comma, without spaces.
+
[source,shell]
----------------------------------
sudo elastic-agent uninstall -f --uninstall-token 7b3d364db8e0deb1cda696ae85e42644,a7336b71e243e7c92d9504b04a774266
----------------------------------

* `--uninstall-token`'s argument can also be a path to a text file with one uninstall token per line.
+
NOTE: You must use the full file path, otherwise the file may not be found.
+
[source,shell]
----------------------------------
sudo elastic-agent uninstall -f --uninstall-token /tmp/tokens.txt
----------------------------------
+
In this example, `tokens.txt` would contain:
+
[source,txt]
----------------------------------
7b3d364db8e0deb1cda696ae85e42644
a7336b71e243e7c92d9504b04a774266
----------------------------------

[discrete]
[[uninstall-endpoint]]
== Uninstall {elastic-endpoint}
Expand Down

0 comments on commit eb058bb

Please sign in to comment.