000033327 - How to remove endpoint agents that have been inactive for a long time from Enterprise manager UI in RSA Data Loss Prevention 9.6 and later

Document created by RSA Customer Support Employee on Jul 29, 2016Last modified by RSA Customer Support Employee on Apr 21, 2017
Version 2Show Document
  • View in full screen mode

Article Content

Article Number000033327
Applies ToRSA Product Set: DLP
RSA Product/Service Type: Enterprise Manager
RSA Version/Condition: 9.5 SP1
Platform: Windows
O/S Version: 2008 Server R2 Standard (64 bit)
 
IssueHow to remove endpoint agents that have been inactive for a long time from Enterprise manager?
ResolutionTo list the endpoints that have been inactive since a certain date ,use the following select query from the Enterprise manager database:
select * from EP_AGENT_SYSTEM_EVENT where heartbeat_timestamp < '2016-04-20 00:00:00.000'

To proceed with deleting these endpoints from the status table run the following delete statement from the Enterprise manager database:
delete from EP_AGENT_SYSTEM_EVENT where heartbeat_timestamp < '2016-04-20 00:00:00.000'

 

Attachments

    Outcomes