Remove agents using the CLI

The /var/ossec/bin/manage_agents tool can also remove Wazuh agents using the command line interface (CLI).

Run the following command on the Wazuh server:

# /var/ossec/bin/manage_agents

****************************************
* Wazuh v4.8.0 Agent manager.        *
* The following options are available: *
****************************************
   (A)dd an a,gent (A).
   (E)xtract key for an agent (E).
   (L)ist already added agents (L).
   (R)emove an agent (R).
   (Q)uit.
Choose your action: A,E,L,R or Q: r

Available agents:
   ID: 002, Name: Ubuntu, IP: any

Provide the ID of the agent to be removed (or '\q' to quit): 002
Confirm deleting it?(y/n): y
Agent '002' removed.

manage_agents: Exiting.

You can run the following command on the Wazuh server and specifiy the Wazuh agent ID by using the -r option. Replace <WAZUH_AGENT_ID> with the agent ID of the Wazuh agent:

# /var/ossec/bin/manage_agents -r <WAZUH_AGENT_ID>

****************************************
* Wazuh v4.8.0 Agent manager.          *
* The following options are available: *
****************************************
   (A)dd an agent (A).
   (E)xtract key for an agent (E).
   (L)ist already added agents (L).
   (R)emove an agent (R).
   (Q)uit.
Choose your action: A,E,L,R or Q:
Available agents:
   ID: 001, Name: new, IP: any
Provide the ID of the agent to be removed (or '\q' to quit): 001
Confirm deleting it?(y/n): y
Agent '001' removed.

manage_agents: Exiting.