000033327 - How to remove endpoint agents from RSA Data Loss Prevention 9.6 and later that have been inactive for a long time from Enterprise manager UI

Document created by RSA Customer Support Employee on Jul 29, 2016•Last modified by RSA Customer Support on Jun 26, 2018
Version 4Show Document
  • Comment • 0
  • View in full screen mode

Article Content

Article Number000033327
Applies ToRSA Product Set: DLP
RSA Product/Service Type: Enterprise Manager
RSA Version/Condition: 9.5 SP1
Platform: Windows
O/S Version: 2008 Server R2 Standard (64 bit)

 
IssueThis article explains how to remove endpoint agents that have been inactive for a long time from RSA Data Loss Prevention 9.6 and later Enterprise manager
ResolutionTo list the endpoints that have been inactive since a certain date, use the following SELECT query from the Enterprise Manager database:

SELECT * FROM EP_AGENT_SYSTEM_EVENT WHERE heartbeat_timestamp < '2016-04-20 00:00:00.000'


To proceed with deleting these endpoints from the status table, run the following DELETE statement from the Enterprise Manager database:

DELETE FROM EP_AGENT_SYSTEM_EVENT WHERE heartbeat_timestamp < '2016-04-20 00:00:00.000'


 

Attachments

    Outcomes