You can uninstall the Cortex® XDR™ Collector from one
or more Windows or Linux collector machines at any time.
If you want to uninstall the Cortex® XDR™
Collector from the on-premise collector machine, you can do so from
the Cortex XDR Collectors console at any time. You can uninstall
the Cortex XDR Collector from an unlimited number of collector machines
in a single bulk action. Uninstalling a collector machine triggers
the following lifespan flow:
Once you uninstall the XDR
Collector from the on-premise collector machine, Cortex XDR distributes
the uninstall to the selected collector machine at the next heartbeat
communication with the XDR Collector. All XDR Collector files are
removed from the collector machine.
The collector machine status changes to
After a retention period of 7 days, the XDR Collector is deleted
from the database and is displayed in Cortex XDR as
Data associated with the deleted on-premise collector machine
is displayed in the
for the standard 90 days retention period.
workflow describes how to uninstall the Cortex XDR Collector from
one or more Windows or Linux on-premise collector machines.
Select the collector machines you want to uninstall.
You can also select collector machines running different
operating systems to uninstall the XDR Collectors at the same time.
Right-click your selection and select
To proceed, select
confirm that you understand this action uninstalls the XDR Collector
on all selected collector machines.
To monitor the status of the uninstall process, go to