How do you Remove the OFFLINE AGENTS

InsightVM
1

I have 12 assets not in my console but are in the agent list in the platform. They show offline, and we are getting notifications via email about offline agents (didnt know that was a thing) anway there are 12 offline but they are shut down how do i make them go away from the platform from the offline sections in agent list???

2

Agents for IVM vulnerability collection can be configured to drop off using the IVM-specific data retention policy on the local security console. This action will remove the asset page and reduce the IVM license count. Learn more.

When the assets come back online, the Agent Software, if still installed, will begin beaconing into Rapid7 endpoints and reappear in IVM. This is contingent on the Agent Software being set to start automatically and its jobs not failing for any reason.

IVM offers additional options to manage the asset page and reduce the license count, such as filtering assets into an Asset Group and deleting them from the console.

https://docs.rapid7.com/insightvm/database-backuprestore-and-data-retention/#agent-data

3

They will just dissapear

Agents can have the following statuses:

  • Online - Indicated in green, an online agent has sent its status in the last 10 minutes.
  • Offline - Indicated in gray, an offline agent has sent its status within the last 15 days but not in the last 10 minutes.
  • Stale - Indicated in yellow, a stale agent has not sent its status in at least 15 days.
    • Agent Management will only be able to show this status if your retention setting is set to the 30 day period.

What happens to agents that stop communicating over time?

The Agents table functions as a rolling snapshot of all agents that have communicated with the Insight Platform for the currently selected organization. The duration of this snapshot is determined by a retention period setting that you can configure. By default, this retention period is set to 30 days.

Any agent that has not sent its status to the Insight Platform within the retention period will be removed from your Agents table and will no longer factor into your agent metrics. If the agent is able to check back in at a later time (which is common for assets that go without internet connectivity for extended periods), it will reappear. Consequently, agents shown here may differ from historical agents shown in your Insight products.

Agent Management in the Insight Platform | Insight Agent Documentation (rapid7.com)

4

Same problem here, it’s annoying but there’s no way to manually delete the old agents. There’s a setting to configure how long an agent should be offline before it ages out of teh system, but 7 days is the shortest :frowning: