Carbon Black Cloud: How To Delete Inactive Devices From the Console

Products

• Carbon Black Cloud Enterprise EDR (formerly Cb Threathunter)

Issue/Introduction

To delete / remove inactive devices from the console.

Environment

• Carbon Black Cloud Console: All Versions
• Carbon Black Cloud Sensor: All Versions
• Microsoft Windows: All Supported Versions
• Mac OS: All Supported Versions

Resolution

1. Log into the Carbon Black Cloud Console
2. Click onto "Endpoints"
3. Filter for status "inactive"
4. Select the sensors(s)
5. Click Take Action and then click "uninstall"
6. Wait for the sensor to flip to "deregistered" status
7. Click Take Action and then click "delete deregistered devices"
8. Confirm the deletion

Additional Information

• Inactive devices won't be effected by "delete deregistered devices". They must first be marked as deregistered.
•  The idea behind that is to avoid a situation where a device that's still in the environment is missing in the console. Marking it as uninstalled/deregistering means the device has been confirmed as not in the environment anymore or that there is a desire to uninstall it. The next time a device marked as uninstalled/deregistered tries to check in -  it will be uninstalled.