Restart agent ↗

You can restart an agent from the Cortex XSIAM tenant.

This action is hidden by default.

As soon as the action is confirmed, the restart command triggers a restart of the agent on the endpoint.

From Cortex XSIAM, navigate to Inventory → Endpoints → All Endpoints. Select the relevant endpoint to restart and right-click + Alt, select Endpoint Control → Restart Agent, and click OK.

Select I agree, and then click OK to confirm restarting the agent on all selected endpoints.