Cortex XDR agent deletion after a period of time

K.Gadirov — Thu, 05 Dec 2024 12:21:45 GMT

Is there any way to delete Cortex XDR agents automatically after a period of connection lost, like 6 months or so? We have a server which was not used for nearly half a year, and our IT team says its agent was deleted without them knowing. Is it really possible?

Re: Cortex XDR agent deletion after a period of time

jmazzeo — Thu, 05 Dec 2024 14:00:25 GMT

Hi @K.Gadirov, thanks for reaching us using the Live Community.

You can configure the auto deletion period in Settings - Configurations - General -> Agent Configurations and look for the Agent Status setting.

The default setting is at 180 days.

This is the official doc for this configuration: https://docs-cortex.paloaltonetworks.com/r/Cortex-XDR/Cortex-XDR-Documentation/Configure-global-agent-settings?tocId=27PvjLbv2lSar386QWbxqg

If this post answers your question, please mark it as the solution.

topic Re: Cortex XDR agent deletion after a period of time in Cortex XDR Discussions

Cortex XDR agent deletion after a period of time

Re: Cortex XDR agent deletion after a period of time