Wazuh – Remove Agents

Wazuh is an open-source security monitoring solution that helps organizations detect and respond to threats in real-time. One of the key features of Wazuh is its ability to monitor and manage agents, which are installed on the systems being monitored.

Removing agents from Wazuh can be necessary for various reasons, such as decommissioning a system or reconfiguring the monitoring setup. The process of removing agents is straightforward and can be done through the Wazuh web interface.

Steps to remove from the WEB Interface:

To remove an agent, follow these steps:

  1. Log in to the Wazuh web interface.
  2. Navigate to the “Agents” tab.
  3. Select the agent you want to remove from the list.
  4. Click on the “Remove” button.
  5. Confirm the removal by clicking on “OK” in the confirmation dialog.

Once the agent is removed, it will no longer be monitored by Wazuh. However, it’s important to note that removing an agent does not automatically uninstall the agent software from the system being monitored. You will need to manually uninstall the agent software if you no longer need it.

Steps to remove from the Command Line Interface:

For removing the agent, use the following: Command to execute.

Example display of the above execution : 

If the user would like to remove the agent without confirmation, use the option shown below:

Reference : Official Wazuh Documentation Click Here

Leave a Reply

Your email address will not be published. Required fields are marked *