Accidently deleted endpoints in Cortex console

[AsifSid]

Hi All,

I have accidently deleted endpoints in cortex console. Can you please advise how to get back those deleted.

Regard 

Asif Siddiqui

[fmoixsante]

Hi @AsifSid 

Have those agent re-checkin again with the XDR console.

[gjenkins]

Hi @AsifSid ,

I agree with @fmoixsante in that you will want to force the device to try checking in again. My recommendation is to use "cytool reconnect force <distribution_id>" to have your endpoints check back in after deletion on the tenant. The <distribution_id> can be collected from the agent installation page by exposing the "id" column.

 

[ShortNestling]

---

@AsifSid wrote: PrepaidCardStatus

Hi All,

I have accidently deleted endpoints in cortex console. Can you please advise how to get back those deleted.

Regard 

Asif Siddiqui

---

Your Blog is very nice. Wish to see much more like this. Thanks for sharing your information

[fmoixsante]

cytool reconnect force <distribution_id> is not really necessary when you delete an endpoint, and the endpoint is enabled as the endpoint is also less than 180 old. Just a normal checkin should suffice, which also means that as long as those machines have network access, most likely reconnected to your tenant with 5-10 minutes automatically. If those agents do not appear and normal checkin that doesn't work, you could do as @gjenkins recommended.