Uninstalling an Agent

To uninstall Tripwire VIA Agent or Tripwire Axon Agent for TLC software from a Windows system:

1.

Log in to the system with Administrator privileges.

2.

Open the Windows Control Panel.

3.

In the Control Panel, open Add / Remove Programs or Programs and Features.

4.

Select Tripwire VIA Agent or Tripwire Axon Agent for TLCA service that may be installed on a Windows, AIX, or Linux system to collect log messages from any log-generating application running on the system. When installed on a Windows system, this service can also collect the system's Windows Event1. Either a log message that a Manager has standardized (i.e. normalized) for use by TLC (a.k.a. Normalized Messages), or an event or vulnerability imported from a scanner. 2. An 'event message' collected from a Log Source. Logs via the Secure Socket Layer (SSL) protocol..

5.

Click Remove.

6.

If you uninstalled VIA Agent and you do not plan to re-install the Agent, delete the following directories:

<Program Files>\Tripwire\Agent

%PROGRAMDATA%\Tripwire\agent

If you uninstalled Tripwire Axon AgentA system on which Tripwire Axon Agent for TLC software has been installed. for TLC and you do not plan to re-install the Agent, delete the following directories: 

<Program Files>\Tripwire\Agent-TLC

%PROGRAMDATA%\Tripwire\agent-tlc

To uninstall Tripwire VIA Agent or Tripwire Axon Agent for TLC software from a Linux system:

1.

Log in to the system as root.

2.

At a command prompt, enter the appropriate command for the Agent.

For a VIA Agent, enter: 

rpm -e tw-via-agent

For Tripwire Axon Agent for TLC on a Debian system, enter: 

dpkg –r tw-axon-agent-tlc

For Tripwire Axon Agent for TLC on other AIX or Linux platforms, enter:

rpm -e tw-axon-agent-tlc

3.

If you uninstalled VIA Agent and you do not plan to re-install the Agent, delete the following directories:

/etc/tripwire

/opt/tripwire/agent

/var/cache/tripwire

/var/lock/tripwire

/var/log/tripwire

/var/spool/tripwire

If you uninstalled Tripwire Axon Agent for TLC and you do not plan to re-install the Agent, delete the following directories: 

/etc/tripwire-tlc

/opt/tripwire/agent-tlc

/var/cache/tripwire-tlc

/var/lock/tripwire-tlc

/var/log/tripwire-tlc

/var/spool/tripwire-tlc