Clear agent database

Learn how to clear the Cortex XDR agent database.

If one or more Cortex XDR agents are having issues, you can attempt a reset by clearing the Cortex XDR agent state of one or more endpoints.

Note:

Clearing the agent database is supported on all platforms with Cortex XDR agent version 7.9 or later, and is available only when using the debugging mode.

Clear the agent database

1

Select the endpoints

• Go to Inventory → Endpoints → All Endpoints.
• Select the endpoints whose databases you want to clear.

2

Open the debugging menu

• On Windows, press Alt and right-click.
• On macOS, press Option and right-click.
• Select Endpoint Control → Clear Agent Database.

3

Track the action

• Go to Investigation & Response → Response → Action Center.
• In All Actions, filter Action Type by Agent Database Cleanup.

Note:

You can only right-click to cancel the clear agent database for actions with a pending status.