Secure Endpoint Advantage API v3 how to remove old computers

[Matt Hosford]

Secure Endpoint Advantage API v3 how to remove old computers from the portal?

I'd like to automatically remove computers from the portal that have not been seen in 2 months.   Looking at the API documentation here https://developer.cisco.com/docs/secure-endpoint/ I'm not seeing how to manage them.  Am I missing something?  Does this need to be setup in a policy?

[Matthew Franks · Accepted solution]

Have you tried using this script?
https://github.com/CiscoSecurity/amp-04-delete-stale-guids

You can customize the time frame.  Just be aware, this doesn't uninstall anything so if the endpoint comes back online, you would see it in the console again.

[Matt Hosford]

Oh wow.  I'll check this out.  This appears to be exactly what I'm looking for.  Thanks Matthew for the quick reply!

[Troja007]

Hello @Matt Hosford ,
regarding the uninstall feature with secure endpoint. FYI, the feedback button in Secure Endpoint generates a Feature Request in our global Feature Request tool. Today, this is a one way communication. But finally, any FR helps to prioritize upcoming and new features.
Greetings, Thorsten

[Matt Hosford]

That's good to know.  What Matthew Franks shared is what I needed.

[johnosn]

An alternative to this would be to use the SecureX Orchestration workflow to remove inactive endpoints.
0056-remove-inactive-endpoints