How to remove endpoint agents from RSA Data Loss Prevention 9.6 and later that have been inactive for a long time from Enterprise manager UI
Originally Published: 2016-06-14
Last Modified: 2023-10-06
Article Number
000067827
Applies To
RSA Product Set: DLP
RSA Product/Service Type: Enterprise Manager
RSA Version/Condition: 9.5 SP1
Platform: Windows
O/S Version: 2008 Server R2 Standard (64 bit)

 
Issue
This article explains how to remove endpoint agents that have been inactive for a long time from RSA Data Loss Prevention 9.6 and later Enterprise manager
Resolution
To list the endpoints that have been inactive since a certain date, use the following SELECT query from the Enterprise Manager database: 
SELECT * FROM EP_AGENT_SYSTEM_EVENT WHERE heartbeat_timestamp < '2016-04-20 00:00:00.000'

To proceed with deleting these endpoints from the status table, run the following DELETE statement from the Enterprise Manager database: 
DELETE FROM EP_AGENT_SYSTEM_EVENT WHERE heartbeat_timestamp < '2016-04-20 00:00:00.000'

 

Related Articles

Trending Articles

Don't see what you're looking for?