Rollback feature for agent upgrade

Showing results for 
Show  only  | Search instead for 
Did you mean: 

Rollback feature for agent upgrade

L3 Networker

Where can I find agent agent upgrade rollback plan for failed upgrades in cortex XDR?



L5 Sessionator

Hi @Shashanksinha ,


Thank you for writing to live community!


Starting XDR agent 7.8 and above, Cortex XDR agent has a vestigial process known as XDR Health Helper. This process is responsible for checking the upgrade health and the agent health after agent upgrade. After the reboot on the endpoint, the agent health helper checks the upgrade status and performs checks for the same. If the agent health is found to have instability on the upgrade process, the agent would roll back to the previous agent version. 


Hope this helps!


Please mark the response as "Accept as Solution" if it answers your query!



Neel Rohit

L2 Linker

@neelrohit What if you manually need to rollback to an older version without having to uninstall the current agent?

L1 Bithead

I would also like to know how to manually rollback to an older version of the agent.

@MosR , @Edgar_Lapuerta ,


Manual rollback of agent to an older version is not possible.

We have a positive flow model and all the issues can be addressed in the specific or subsequent versions. As a result, the agent will also move downstream on agent upgrades. 


However, if the agent upgrades are unstable(because of any reasons), then the agent will rollback to previous version automatically to avoid agent instabilities and potential issues on endpoints

Thanks Neelrohit.





  • 5 replies
  • 78 Subscriptions
Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!