For macOS and Windows, you can uninstall a sensor with the uninstall command as documented in our technical documentation.
For Linux, it depends on how you installed it. If you used the systemV installation method, you can see the command here.
To do it remotely you could use:
run --shell-command "service limacharlie stop; rm /bin/rphcp; update-rc.d limacharlie remove -f; rm -rf /etc/init.d/limacharlie; rm /etc/hcp ; rm /etc/hcp_conf; rm /etc/hcp_hbs"
If you want to run those on all sensors you could just loop with the SDK in Python:
import limacharlie
lc = limacharlie.Manager()
for sensor in lc.sensors():
sensor.task( 'uninstall' )
Using a D&R Rule
As an alternative approach, you can also use a Detection & Response (D&R) rule to automatically trigger an uninstall of the LimaCharlie sensor when a sensor connects to the LimaCharlie cloud. Below is an example of the rule you can use for this purpose. This example is specific to Windows-based endpoints, but can be modified based on your needs:
Detect
event: CONNECTED
op: is windows
Respond
- action: task
command: uninstall --is-confirmed
- action: add tag
tag: uninstalled
Manually
You can also manually uninstall the LimaCharlie sensor on individual endpoints by running the LimaCharlie installer with the -c argument.