Deleting Inactive Devices From the Console

Products

• Carbon Black Cloud Enterprise EDR (formerly Cb Threathunter)
• Carbon Black Cloud Endpoint Standard (formerly Cb Defense)

Issue/Introduction

• To delete / remove inactive devices from the console.
• Remove specific inactive sensor references from the console

 

Environment

• Carbon Black Cloud Console: All Versions
• Carbon Black Cloud Sensor: All Versions
• Microsoft Windows: All Supported Versions
• Mac OS: All Supported Versions

Resolution

1. Log into the Carbon Black Cloud Console
2. Click onto "Endpoints"
3. Filter for status "inactive"
4. Select the sensors(s)
5. Click Take Action and then click "uninstall sensors"
6. Wait for the sensor to flip to "deregistered" status
7. Click Take Action and then click "delete deregistered assets"
8. Confirm the deletion

Additional Information

• Inactive devices won't be effected by "delete deregistered devices". They must first be marked as deregistered.
• The idea behind that is to avoid a situation where a device that's still in the environment is missing in the console. Marking it as uninstalled/deregistering means the device has been confirmed as not in the environment anymore or that there is a desire to uninstall it. The next time a device marked as uninstalled/deregistered tries to check in -  it will be uninstalled.