Log in

Sangfor Support Center

Table of Contents
< All Topics
Print

ES Delete Endpoint From System Backend

Posted
Updated
Bysiva@sangfor.com
Views43

Issue Description

An environment where endpoint failed to be deleted from the WebUI console.

Error/Warning Information

Failed/unable to delete endpoint from ES manager WebUI console.

Handling Process

  1. Access the ES manager system backend.
    Switch to root.
    Command: sudo -i

  2. Login to mongodb
    Command: /ac/dc/ldb/bin/mongo
    file

  3. Use and query the database table.
    Command: use sangfor_edr;
    Command: db.auth(‘sangfor_edr’,’Esa0ad1bQz!’)
    If not work, try Sangforedr! for the password.
    file

  4. Obtain the endpoint/agent id.
    file

  5. Execute queries below to update the database.
    db.agent_info.updateOne({"agent_id":"2440220038"},{$set:{"deleted":1}});
    db.agent_info.updateOne({"agent_id":"2440220038"},{$set:{"offline_reason":2}});
    file

  6. Restart services
    /sf/edr/manager/bin/eps_services restart

  7. Refresh the endpoint list.
    file

Root Cause

Disabled endpoint cannot be deleted from ES manager WebUI console.

Solution

  1. Refer to the handling process.

    Suggestion

    If the scenario varies from above or the solution doesn’t work, kindly contact Sangfor technical support for further assistance.