Uninstall Linux Sensors Directly on Endpoints

You can use the following procedures to directly uninstall Carbon Black EDR Linux sensors on endpoints.

Prerequisites

You must be a root user or have “sudoer” permissions and run the installer with “sudo”.

Procedure

1. If you are running Linux sensor 6.2 or later, run the following command:

   /opt/carbonblack/response/bin/sensoruninstall.sh

2. If you are running a version of the Linux sensor that is earlier than 6.2, run the following command:

   /opt/cbsensor/sensoruninstall.sh

   When this process is complete, the endpoint stops reporting events and binaries to the Carbon Black EDR server.