This documentation contains work-in-progress information for future Elastic Stack and Cloud releases. Use the version selector to view supported release docs. It also contains some Elastic Cloud serverless information. Check out our serverless docs for more details.
Uninstall Elastic Agent
editUninstall Elastic Agent
editTo uninstall Elastic Agent from a host, run the uninstall
command from the directory where it’s running. Refer to the Fleet and Elastic Agent documentation for more information.
If Agent tamper protection is enabled on the Agent policy for the host, you’ll need to include the uninstall token in the command, using the --uninstall-token
flag. You can find the uninstall token on the Agent policy. Alternatively, find Fleet in the navigation menu or by using the global search field, and select Uninstall tokens.
For example, to uninstall Elastic Agent on a macOS or Linux host:
sudo elastic-agent uninstall --uninstall-token 12345678901234567890123456789012
Uninstall Elastic Endpoint
editUse these commands to uninstall Elastic Endpoint from a host ONLY if uninstalling an Elastic Agent is unsuccessful.
Windows
cd %TEMP% copy "c:\Program Files\Elastic\Endpoint\elastic-endpoint.exe" elastic-endpoint.exe .\elastic-endpoint.exe uninstall del .\elastic-endpoint.exe
macOS
cd /tmp cp /Library/Elastic/Endpoint/elastic-endpoint elastic-endpoint sudo ./elastic-endpoint uninstall rm elastic-endpoint
Linux
cd /tmp cp /opt/Elastic/Endpoint/elastic-endpoint elastic-endpoint sudo ./elastic-endpoint uninstall rm elastic-endpoint