000033327 - How to remove endpoint agents from RSA Data Loss Prevention 9.6 and later that have been inactive for a long time from Enterprise manager UI

Document created by RSA Customer Support Employee on Jul 29, 2016•Last modified by RSA Customer Support on Jan 23, 2018
Version 3Show Document
  • Comment • 0
  • View in full screen mode

Article Content

Article Number000033327
Applies ToRSA Product Set: DLP
RSA Product/Service Type: Enterprise Manager
RSA Version/Condition: 9.5 SP1
Platform: Windows
O/S Version: 2008 Server R2 Standard (64 bit)
 
IssueThis article explains how to remove endpoint agents that have been inactive for a long time from RSA Data Loss Prevention 9.6 and later Enterprise manager
ResolutionTo list the endpoints that have been inactive since a certain date, use the following SELECT query from the Enterprise manager database:

SELECT * FROM EP_AGENT_SYSTEM_EVENT WHERE heartbeat_timestamp < '2016-04-20 00:00:00.000'

To proceed with deleting these endpoints from the status table, run the following DELETE statement from the Enterprise manager database:

DELETE FROM EP_AGENT_SYSTEM_EVENT WHERE heartbeat_timestamp < '2016-04-20 00:00:00.000'

 

Attachments

    Outcomes