Hi all, I have a problem with the agent - I have one agent that is not communicating with the xdr server after installation. The host in question had it's agent uninstalled via the xdr server, and then re-installed by the IT team. However now the host shows an "Uninstalled" status and there's no communication between the host and the server.
What can be done in this situation?
Hi @Daniel_Itenberg ,
could you please try to reconnect using the following command on the subject endpoint and tell us the output ?
c:\Program Files\Palo Alto Networks\Traps>cytool reconnect force
Does it reconnect ? can the checkin be performed ? does it appear as connected in the tenant after the given command ?
As a good practise try to always use the last agent release
If this doesnt work, please feel free to open a TAC support ticket
Hi @Daniel_Itenberg can you please confirm if the XDR agent is installed in the default path "/Library/Application Support/PaloAltoNetworks/Traps/bin" as stated here: https://docs.paloaltonetworks.com/cortex/cortex-xdr/7-7/cortex-xdr-agent-admin/cortex-xdr-agent-for-...
Can you please
1. share a directory listing of the path "/Library/Application Support/PaloAltoNetworks/Traps/bin" as a screenshot?
2. confirm if the endpoint shows as Connected in XDR tenant UI?
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!