Uninstall a Server (Carbon Black EDR RPMs Only)

Perform the following procedure to remove the packages that constitute the Carbon Black EDR server.

Procedure

1. Stop the Carbon Black EDR services by using one of the following commands:

   sudo /usr/share/cb/cbcluster stop

   or

   sudo service cb-enterprise stop

2. Use the following Yum utility command to remove the Carbon Black EDR packages that are listed in Uninstalling a Server:

   sudo yum remove <package1> <package2> <packageN>

3. Manually remove the following directories:
   • /var/www/cb/
   • /var/run/cb/
   • /var/log/cb/
   • /var/lib/cb/
   • /var/cb/
   • /usr/share/cb/
   • /etc/cb/