topic Re: Accidently deleted endpoints in Cortex console in Cortex XDR Discussions

Accidently deleted endpoints in Cortex console

AsifSid — Thu, 22 Jul 2021 11:08:07 GMT

Hi All,

I have accidently deleted endpoints in cortex console. Can you please advise how to get back those deleted.

Regard

Asif Siddiqui

Re: Accidently deleted endpoints in Cortex console

fmoixsante — Thu, 22 Jul 2021 11:24:32 GMT

Hi @AsifSid

Have those agent re-checkin again with the XDR console.

Re: Accidently deleted endpoints in Cortex console

gjenkins — Thu, 22 Jul 2021 16:09:56 GMT

Hi @AsifSid ,

I agree with @fmoixsante in that you will want to force the device to try checking in again. My recommendation is to use "cytool reconnect force <distribution_id>" to have your endpoints check back in after deletion on the tenant. The <distribution_id> can be collected from the agent installation page by exposing the "id" column.

Re: Accidently deleted endpoints in Cortex console

ShortNestling — Sat, 24 Jul 2021 09:08:43 GMT

@AsifSid wrote: PrepaidCardStatus
Hi All,

I have accidently deleted endpoints in cortex console. Can you please advise how to get back those deleted.

Regard
Asif Siddiqui

Your Blog is very nice. Wish to see much more like this. Thanks for sharing your information

Re: Accidently deleted endpoints in Cortex console

fmoixsante — Sat, 24 Jul 2021 10:15:20 GMT

cytool reconnect force <distribution_id> is not really necessary when you delete an endpoint, and the endpoint is enabled as the endpoint is also less than 180 old. Just a normal checkin should suffice, which also means that as long as those machines have network access, most likely reconnected to your tenant with 5-10 minutes automatically. If those agents do not appear and normal checkin that doesn't work, you could do as @gjenkins recommended.