From d4c69714529b94f2483eb4cbfd85ba68d4431810 Mon Sep 17 00:00:00 2001 From: "mergify[bot]" <37929162+mergify[bot]@users.noreply.github.com> Date: Tue, 14 Nov 2023 12:02:01 -0500 Subject: [PATCH] Update Fleet/Agent docs for Agent tamper protection (Elastic Defend) (#674) (#680) * Add note about uninstall tokens in command * Include "Uninstall tokens" tab in Fleet UI list * Add links, comment out for now * Update links to published Security docs URLs * Edit link anchor text (cherry picked from commit 91ab5eda287c52f0e3a068cb88026df8d3cb7235) Co-authored-by: Joe Peeples --- .../elastic-agent/uninstall-elastic-agent.asciidoc | 2 ++ docs/en/ingest-management/fleet/fleet.asciidoc | 3 +++ 2 files changed, 5 insertions(+) diff --git a/docs/en/ingest-management/elastic-agent/uninstall-elastic-agent.asciidoc b/docs/en/ingest-management/elastic-agent/uninstall-elastic-agent.asciidoc index 880cf6add..90615fb0e 100644 --- a/docs/en/ingest-management/elastic-agent/uninstall-elastic-agent.asciidoc +++ b/docs/en/ingest-management/elastic-agent/uninstall-elastic-agent.asciidoc @@ -21,6 +21,8 @@ If you run into problems, refer to <>. If you are using DEB or RPM, you can use the package manager to remove the installed package. +NOTE: For hosts enrolled in the {elastic-defend} integration with Agent tamper protection enabled, you'll need to include the uninstall token in the command, using the `--uninstall-token` flag. Refer to the {security-guide}/agent-tamper-protection.html[Agent tamper protection docs] for more information. + [discrete] == Remove {agent} files manually diff --git a/docs/en/ingest-management/fleet/fleet.asciidoc b/docs/en/ingest-management/fleet/fleet.asciidoc index 790a6f1dc..78bc9d037 100644 --- a/docs/en/ingest-management/fleet/fleet.asciidoc +++ b/docs/en/ingest-management/fleet/fleet.asciidoc @@ -49,6 +49,9 @@ including {fleet-server} hosts and output settings. |<> |Create and revoke enrollment tokens. +|{security-guide}/agent-tamper-protection.html[Uninstall tokens] +|({elastic-defend} integration only) Access tokens to allow uninstalling {agent} from endpoints with Agent tamper protection enabled. + |<> |View data streams and navigate to dashboards to analyze your data.