Possible Bug in Cortex XDR Agent 9.2 – cytool reconnect force

I.Sasmitha — Thu, 11 Jun 2026 13:03:11 GMT

Has anyone experienced an issue with Cortex XDR Agent 9.2 where running cytool reconnect force causes the agent to uninstall itself and removes all assigned agent tags from the Cortex console?

Is this a known issue or bug in Agent 9.2?

Re: Possible Bug in Cortex XDR Agent 9.2 – cytool reconnect force

kiwi — Thu, 18 Jun 2026 12:58:07 GMT

Hi @I.Sasmitha ,

In theory, running cytool reconnect force without a distribution ID is supposed to re-register the agent to its last connected server.

We recommend to always append the explicit Distribution ID when forcing a reconnect. Giving the agent the specific tenant string ensures the re-registration routine completes successfully without nuking the software package:

cytool reconnect force <your_distribution_id>

I recommended to open a case with TAC to report the behavior you're seeing on Agent 9.2 so engineering can confirm the bug/patch the command's default fallback logic.

Best,

topic Re: Possible Bug in Cortex XDR Agent 9.2 – cytool reconnect force in Cortex XDR Discussions

Possible Bug in Cortex XDR Agent 9.2 – cytool reconnect force

Re: Possible Bug in Cortex XDR Agent 9.2 – cytool reconnect force