1. Home
    2. Security Operations
    3. Cortex XDR
    4. Cortex® XDR Pro Administrator’s Guide
    5. Cortex XDR Collectors
    6. Manage XDR Collectors
    7. Uninstall the XDR Collector

    Uninstall the
    XDR
     Collector

    You can uninstall the Cortex XDR Collector from one or more Windows or Linux collector machines at any time.
    If you want to uninstall the
    Cortex
    XDR
     Collector from the on-premise collector machine, you can do so from the
    Cortex
    XDR
     Collectors console at any time. You can uninstall the
    Cortex
    XDR
     Collector from an unlimited number of collector machines in a single bulk action. Uninstalling a collector machine triggers the following lifespan flow:
    • Once you uninstall the
      XDR
       Collector from the on-premise collector machine,
      Cortex
      XDR
       distributes the uninstall to the selected collector machine at the next heartbeat communication with the
      XDR
       Collector. All
      XDR
       Collector files are removed from the collector machine.
    • The collector machine status changes to
      Uninstalled
      . After a retention period of 7 days, the
      XDR
       Collector is deleted from the database and is displayed in
      Cortex
      XDR
       as
      Collector Machine Name
       -
      N/A (Uninstalled)
      .
    • Data associated with the deleted on-premise collector machine is displayed in the
      Action Center
       tables for the standard 90 days retention period.
    The following workflow describes how to uninstall the
    Cortex
    XDR
     Collector from one or more Windows or Linux on-premise collector machines.
    1. Select
      Settings
      Configurations
      XDR Collectors
      Administration
      .
    2. Select the collector machines you want to uninstall.
      You can also select collector machines running different operating systems to uninstall the
      XDR
       Collectors at the same time.
    3. Right-click your selection and select
      Uninstall Collector
      .
    4. To proceed, select
      I agree
       to confirm that you understand this action uninstalls the
      XDR
       Collector on all selected collector machines.
    5. Click
      OK
      .
      To monitor the status of the uninstall process, go to
      Response
      Action Center
      .

    Recommended For You

    Recommended Videos

    Recommended videos not found.

    © 2022 Palo Alto Networks, Inc. All rights reserved.

    Techdocs Logo