Remove agents using the CLI
The /var/ossec/bin/manage_agents tool can also remove Wazuh agents using the command line interface (CLI).
Run the following command on the Wazuh server:
# /var/ossec/bin/manage_agents
****************************************
* Wazuh v4.8.0 Agent manager. *
* The following options are available: *
****************************************
(A)dd an a,gent (A).
(E)xtract key for an agent (E).
(L)ist already added agents (L).
(R)emove an agent (R).
(Q)uit.
Choose your action: A,E,L,R or Q: r
Available agents:
ID: 002, Name: Ubuntu, IP: any
Provide the ID of the agent to be removed (or '\q' to quit): 002
Confirm deleting it?(y/n): y
Agent '002' removed.
manage_agents: Exiting.
You can run the following command on the Wazuh server and specifiy the Wazuh agent ID by using the -r
option. Replace <WAZUH_AGENT_ID>
with the agent ID of the Wazuh agent:
# /var/ossec/bin/manage_agents -r <WAZUH_AGENT_ID>
****************************************
* Wazuh v4.8.0 Agent manager. *
* The following options are available: *
****************************************
(A)dd an agent (A).
(E)xtract key for an agent (E).
(L)ist already added agents (L).
(R)emove an agent (R).
(Q)uit.
Choose your action: A,E,L,R or Q:
Available agents:
ID: 001, Name: new, IP: any
Provide the ID of the agent to be removed (or '\q' to quit): 001
Confirm deleting it?(y/n): y
Agent '001' removed.
manage_agents: Exiting.