topic Re: AMP for Endpoints: search for duplicates and remove them in Endpoint Security

AMP for Endpoints: search for duplicates and remove them

IamSamSaul — Mon, 07 Sep 2020 21:47:33 GMT

Hi there,

Is there a way to search for duplicate clients (licenses) in AMP for Endpoints portal? I have looked for this option but I can't find it.

Thanks.

Regards,

Sam

Re: AMP for Endpoints: search for duplicates and remove them

Ken Stieers — Mon, 07 Sep 2020 22:16:56 GMT

I don't bother with duplicates, as a machine only checks in with one ID... so I just delete stuff that hasn't checked in within a month.

Re: AMP for Endpoints: search for duplicates and remove them

stealthmode — Tue, 08 Sep 2020 12:18:18 GMT

Hi, you may raise a TAC case to find the duplicates. Otherwise, you'll have to export the CSV from the Management > Computers page and manipulate the excel sheet to find the duplicates. Once those duplicates have been found, you may delete those manually from the console. Other than that, TAC can remove the duplicates as well.

Re: AMP for Endpoints: search for duplicates and remove them

Troja007 — Tue, 08 Sep 2020 16:29:44 GMT

Hello @IamSamSaul,

you are not the first person asking for this feature. I already have seen Feature request for this to fully automate the removal of duplicate and inactive endpoints from AMP UI.
You may ping your Cisco representative to open a Feature Request for this. This helps us to prioritize features which are added to the product.

In the meantime you may check this tool from Github to manage your duplicates: https://github.com/azizaltuntas/Cisco-AMP-for-Endpoint-Duplicate-Finder.

Greetings,

Thorsten

Re: AMP for Endpoints: search for duplicates and remove them

IamSamSaul — Wed, 09 Sep 2020 09:18:08 GMT

Thanks guys for both of your answers. I'll ask the customer to raise a TAC case.