000015135 - DLP - How to delete duplicate Endpoint status

Document created by RSA Customer Support Employee on Jun 14, 2016Last modified by RSA Customer Support Employee on Apr 21, 2017
Version 2Show Document
  • View in full screen mode

Article Content

Article Number000015135
Applies ToThe same system is listed twice in the Endpoint status display under different names
DLP 8.0, 8.5, 8.8, 9.0 but NOT DLP 9.5
Endpoint host System in question was initially configured under one name, but since then the Endpoint Group configuration has changed and the system is now listed differently. Now both system names appear in the display. Example: EPsys123 and EPsys123.corporate.com.
 
IssueRemove duplicate endpoints from Endpoint Status screen
 
CauseThe name listed in the AgentConfigInfo.xml does not match the system name in the Endpoint Group configuration.
 
ResolutionEdit the AgentGroupConfig.xml file so the system name matches the one used in the current configuration.
1) Stop the Endpoint Agent on the host system
2) Use Notepad to modify the AgentConfigInfo.xml file
3) Start the Endpoint Agent on the host system
4) Stop the Enterprise Manager service
5) Run the following query on the DLP database: delete from dbo.ST_DESKTOP_GROUP_MACHINE
6) Start the Enterprise Manager service
The Endpoint status screen will now begin to rebuild but the system in question will no longer be duplicated.
 
NotesWhen a Site Coordinator first contacts an Agent, the file AgentConfigInfo.xml is created. This file contains the name of the endpoint host as described by the initial Endpoint Group configuration. If the DLP system is reconfigured and the same Endpoint Agent is used under another name, the status display will list the system under both the new name and the original name, (the name listed in the AgentConfigInfo.xml file).
 
Legacy Article IDa58116

Attachments

    Outcomes